Hmm...this is an interesting prospect which I have never thought about. But
how would you emulate an HA scenario in this regard? The tunnels would
still flow over one link or the other, and routing redundancy would be
eliminated. Just to get it to work sounds like a LOT of policy routing
would be involved.
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Hugo van
der Kooij
Sent: Thursday, January 18, 2007 10:44 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] VRRP Configuration between Nokia and Cisco?
On Wed, 17 Jan 2007, Edward Sohn wrote:
> Hugo, thanks for your feedback. Yes, dynamic routing is only a part of
the
> solution, unfortunately. If the LAN connection goes out on either the
> router or Nokia, then I'm SOL and routing does nothing...
The trick is to setup 2 GRE tunnels. One over each path and then make the
routing decision for the remote network based on the availability of the
GRE tunnels.
Hugo.
--
hvdkooij AT vanderkooij DOT org http://hvdkooij.xs4all.nl/
This message is using 100% recycled electrons.
A: Yes.
>Q: Are you sure?
>>A: Because it reverses the logical flow of conversation.
>>>Q: Why is top posting frowned upon?
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
--------------------------------------------------------------
This e-mail and any attachment thereto contains confidental and/or privileged
information. If you are not the
intended recipient or have received this e-mail in error, please notify the
sender immediately and delete this e-mail
and any attachment thereto from your system. Any unauthorized retention,
copying, transmission, distribution,
disclosure or use of the content of this e-mail and/or any attachment thereto
is prohibited.
Techem is not liable for any omission or error in this e-mail and/or any
attachment thereto which may arise as a
result of the e-mail-transmission or for damages resulting from any
unauthorized change of the content of this e-mail
and/or any attachment thereto.
Thank You
Techem Energy Services GmbH
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
