Hi All,
Here I am ; still suffering with my Nokia's .................. I have one
FW-1 (Nokia IP440) on-line so far, and one that I wish to install as
backup.
Ordering was done by another dept. (my excuse !) so I have only now
discovered that we have only one certificate key. !.....
As I understand it ( and I am more than happy to be corrected on this one !
) this means I can only use one IP address for both boxes.
This in turn means I really need to set them up as a "gateway cluster" and
that would require a separate box to run the management module ....... am I
right so far ?.
I saw the details about the Nokia Tunnel (mutually exclusive to the CP
clusters) on the "knowledge base", but that was about it for alternatives ?
I can see that this is going to get very complicated, so all I want to ask
at this moment is what my options are to provide partial of full failover
capability. If my comments above are correct, I can see only the following
as alternatives :-
1. Buy another box/(management) licence and use the full "gateway Cluster"
technique
2. Use the older Nokia "tunnel" to give (I guess) a non-stateful failover
(I presume this means I would also need another certificate key in order to
config the second Nokia with a different IP address)
3. Buy a third product (eg "Stonebeat")..............(I presume this also
means I would also need another certificate key in order to config the
second Nokia with a different IP address)
I would love to be told that I am wrong !
Your comments and alternatives would be most appreciated,
Thanks in advance,
Gordon
_______________________________________________
Firewalls mailing list
[EMAIL PROTECTED]
http://lists.gnac.net/mailman/listinfo/firewalls
