Firewall-1

Re: [FW-1] Please help with a ClusterXL question

Subject: Re: [FW-1] Please help with a ClusterXL question
From: Javier Hijas <jhijas AT GERMINUS DOT COM>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Mon, 20 Feb 2006 11:35:12 +0100
> so what it means is that when I ping hostX from FirewallB, hostX will see
> the clusterXL IP address and the echo reply from hostX will come back to 
> FirewallA.
> Is this the way ClusterXL works? 


Yes, that's the way. FW-1 will always use the ip you defined as ip
address for that cluster interface in smartdashboard independently of
what you defined as phisical address.

I am confused.  Can someone shed some lights
> on this?  I've never worked with ClusterXL, only with Nokia VRRP and Nokia 
> VRRP does not behave this way.  Is there a way to force FirewallB to use it 
> physical IP
> address instead of ClusterXL IP address?

One way to bypass this is to define a secondary interface and define it
not to belong to cluster interfaces. This way each node will use the
phisical address defined.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>