Firewall-1

Re: [FW-1] IPSO clustering issue

Subject: Re: [FW-1] IPSO clustering issue
From: Hugo van der Kooij <hvdkooij AT VANDERKOOIJ DOT ORG>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Sat, 31 Mar 2007 16:54:58 +0200
On Sat, 31 Mar 2007, Sergio Alvarez wrote:

We have an issue with two IP1220 boxes running IPSO 4.2 and Check Point NGX
R62 over them. The idea is to use them as a cluster configured with IPSO
Clustering, but so far this has not been possible.

There is load of issues you must check:
 - cpconfig setting for clustering
 - cplic print to check you got the right license
 - IP config of the cluster and it's members
 - Proper object definitions (incl. antispoofing ....)

Most definitly check out recent items regarding the exact build of your IPSO version. There are a number of issues with recent IPSO versions just covered lately in new builds. (It did impact VRRP so the clustering mode might suffer as well.)

Hugo.

--
        hvdkooij AT vanderkooij DOT org http://hugo.vanderkooij.org/
            This message is using 100% recycled electrons.

        Some men see computers as they are and say "Windows"
        I use computers with Linux and say "Why Windows?"
                (Thanks JFK, for the insight.)

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>