I had troubles with ipso 3.7 and was forced to add rule to specifically allow vrrp from every vrrp address to the vrrp multicast address (224.0.0.18). (it was automatically allowed in 3.6).
from your modules you can type : iclid -c "show vrrp" and check that your vrrp config works fine. for the connections, you have to set the cluster xl features using the cpconfig and be sure the synchro works. here we have to nokia running in HA mode, and I won't move from one to another as the modules are on two different sites and the synchro won't keep all the connections. hope this'll help nicolas figaro -----Original Message----- From: Hintz Marc [mailto:[EMAIL PROTECTED] Sent: mercredi 15 octobre 2003 12:29 To: [EMAIL PROTECTED] Subject: [FW-1] VRRP Nokia / CP-NG Hi, I have a Nokia IP440/IPSO 3.7 cluster with CP-NG FP3. The Nokia VRRP works fine until I have upgraded from IPSO 3.5 / CP-4.1. The shifting from the master to the backup works fine. But the new master lost all the old connections. I have made the changes from Nokia Resolution 13770 in the CP-rulebase. No effect! The VRRP sync runs over a dedicated interface. I can't see any traffic on these interfaces. A ping from one to the other on these interfaces works. On the other interfaces I can see the VRRP traffic: tcpdump: listening on eth-s3p1 11:50:00.710385 O 10.62.32.66 > 224.0.0.18: VRRPv2-adver 20: vrid 65 pri 250 [tos 0xc0] Any suggestion is greatly appreciated. Best regards Marc MfG -------------------------------------- Marc Hintz Medien-Service Untermain GmbH E-Mail [EMAIL PROTECTED] Tel.: 06021 396167 -------------------------------------- ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
