Tom,
If it hasn't come up before you should approach your ISP about setting up
your routers with HSRP, or whatever their preferred active standby
configuration is (since you already have two routers). This way you may get
a brief blip as the virtual fails, but it doesn't require that your firewall
cluster actually fails over and makes the process more seamless in case of
an unexpected failure.
Tim
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Tom
Brown
Sent: Saturday, February 11, 2006 2:57 PM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] SPLAT HA Cluster Question
AI R55 on SPLAT in 2 module cluster
Our HA cluster is connected to our ISP via 2 seperate routers that they
run. Our IP range is generally routed down from their primary router to
our primary cluster member (we run master/slave config) and if our
primary module fails our secondary will take over and the IP range will
in turn be routed down from the secondary router by the ISP - This works
as we have experienced a primary module lockup.
I have reveived notification from our ISP that they are doing some work
on our primary router overnight and service to this router will be lost.
In theory we will be OK as the secondary router will be online and the
IP's routed from it by our ISP however will our HA cluster 'notice' the
primary router failure and fail traffic over onto our slave firewall
module? Should be have done anything/need to do anything to make sure we
don't loose service diring this outage?
thanks
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
