We have 2 Nokia with 16 LAN interfaces (IPSO 4.1 + CheckPoint NGX R62) ;
we used the VRRP simplified method to configure VRRP on both Nokia ;
To test the VRRP failover mechanism, we unplug 1 cable on the VRRP Master
Nokia, and we can see the associated virtual IP is correctly taken over by
the backup Nokia, which becomes Master,
but, the problem is that this 2nd Nokia becomes Master only for this
interface and remains backup on all the other ones ,
so, it does not work ;
we thought the simplified method allowed the failover process to occur on
all the interfaces at the same time, just when one interface failed on the
Master Nokia ;
What is wrong on our configuration ?
we have defined a different VRID for each interface on both Nokias, with
an associated virtual address for each of them ;
should we defined a single VRID for all of them with as many virtual IP
addresses as interfaces on this single VRID ? (not sure it is possible by
the way)
any help wished
--------------------------------------------------------------------------------------
Joel
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
