You may want to try the first method. I have the same issue with the second
method. I was told by RSA folks that the second method sometimes it works
and
most of the time it does not. The first method works for me flawlessly
Erin Young <y_erin AT HOTMAIL DOT COM> wrote:
Attempting to setup SecurID for use on 2 Nokias IPSO3.8 in a Fault tolerance
config running Checkpoint NG R55. Has anyone got this to work by defining
the AceAgent host with the VIP? The checkpoint documentation states that 2
methods can be used. First method is to define a seperate aceagent host for
each Node (Nokia). The second method states that you can define one ace
agent host file and use the VIP and define the physical interfaces as
secondary nodes. I opted for the second and it's not working. Also, when I
defined the aceagent host I created a DNS entry on our DNS server so the Ace
server can resolve the firewall to a DNS name. Must you define it in the
local host file on th Ace server?
_________________________________________________________________
Don?t just search. Find. Check out the new MSN Search!
http://search.msn.click-url.com/go/onm00200636ave/direct/01/
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
---------------------------------
Want to be your own boss? Learn how on Yahoo! Small Business.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|