Hi Israel,
Here's my setup: 2 IP350 with NG R55, Nokia cluster. The IP addresses of
the firewall objects are internal, and there are no problems about that.
Considering *local licensing*: In fact, NG allows you to attach the
license to any interface, as long as it's a 'physical' interface
recognized by the 'get topology' function and it has the correct IP
address. It doesn't need to be an external interface.
Central licensing eliminates this problem, as licenses are issued to the
IP address of the primary smartcenter. If you have a distributed
environment, consider using this type of licensing for flexibility.
--
Zenari
Flores Portillo, Israel wrote:
Hi Gurus,
Does somebody know what problems would I have if the IP Address
of my firewall object is not its IP address from the external interface? I
have read some place that administrator should configure the external IP
address as the IP for the firewall object, but I don't why.
I am making a fresh installation but I am planning an IP address
change for the external interfaces in two months therefore I will need to
relicense (somebody knows how many times can I do this?). Maybe I could
license to the internal IP address to avoid the license again later.
I have a cluster with two firewalls, and another possibility is
to define the firewall objects with an internal IP address (the license
would attached to this one) and define the cluster object with the external
IP address, how that sounds? Will I have problems later?
Anyone could give an advice?
Israel Flores Portillo
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
_______________________________________________________
Você quer respostas para suas perguntas? Ou você sabe muito e quer compartilhar seu conhecimento? Experimente o Yahoo! Respostas !
http://br.answers.yahoo.com/
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
