On 6/27/06, Erin Young <y_erin AT hotmail DOT com> wrote:
Attempting to setup SecurID for use on 2 Nokias IPSO3.8 in a Fault
tolerance
config running Checkpoint NG R55. Has anyone got this to work by defining
the AceAgent host with the VIP? The checkpoint documentation states that 2
methods can be used. First method is to define a seperate aceagent host
for
each Node (Nokia). The second method states that you can define one ace
agent host file and use the VIP and define the physical interfaces as
secondary nodes. I opted for the second and it's not working. Also, when I
defined the aceagent host I created a DNS entry on our DNS server so the
Ace
server can resolve the firewall to a DNS name. Must you define it in the
local host file on th Ace server?
Hi,
I think you need to make sure the /var/ace/sdopts.rec file contains the
correct CLIENT_IP=xxx.xxx.xxx.xxx Ip address for the vip node
- Yang
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
| 