Randy,
Are you sure that you've got the model number right? I think you mean the
IP650 or the IP440. Either way, failover is normally accomplished by
configuring the VRRP protocol on the Nokia platform (through the Voyager
interface). This can be done independently of FW-1 if you don't have FW-1
installed. Otherwise, there are a few other things to configure for VRRP
w/FW-1. Load balancing is somewhat of a different story.
What type of traffic do you want to load balance? (Web server farm, general
network traffic, etc). There is a resolution about configuring load
balancing on Nokia's support site if you have a login account. Its
resolution number 1561 - Connect Control FAQ (FireWall-1 Load Balancing).
If you just want to load balance the traffic between the two Nokia's then
you can fiddle with the VRRP config so that part of your traffic prefers one
of the Nokia's while the rest goes to the other. The latest implementation
of VRRP on the Nokia platform is called Monitored Circuit. It utilizes a
Virtual IP address so that if a failover does occur, none of the external
routers will have to change/update their routing config to accomodate the
failover. The same goes for internal clients that use the Virtual IP for
their default route. The older version of VRRP is called VRRP v2. It does
not use the Virtual IP and instead uses the IP addresses of the
external/internal interfaces on both machines. There can be problems with
asymmetrical routing using VRRP v2, hence the migration to Monitored
Circuit.
The short answer to your question is that its pretty straightforward to
configure VRRP on the Nokia's (for redundancy and failover). Load balancing
takes a bit more work but is not overly difficult. Hope this helps.
opiesan
>From: "Randy Belk" <[EMAIL PROTECTED]>
>To: "<" <[EMAIL PROTECTED]>
>Subject: Nokia 640 Firewall Question
>Date: Wed, 22 Nov 2000 08:27:35 -0600
>
>How hard is it to do failover and load balancing on the Nokia 640's?
>
>-
>[To unsubscribe, send mail to [EMAIL PROTECTED] with
>"unsubscribe firewalls" in the body of the message.]
_____________________________________________________________________________________
Get more from the Web. FREE MSN Explorer download : http://explorer.msn.com
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
