Hi, We had all sorts of issues getting Nokia platforms to use Trunk ports. Firstly Nokia only seems to support 802.1q trunk ports, not vendor specific trunking like Cisco's ISL. The platform does not let you trunk on the default mgmt VLAN 1, which is a good thing but can cause issues. Finally the interfaces used for synchronisation do not work very well across trunking ports.
-----Original Message----- From: Emmanuel Bailleul [mailto:[EMAIL PROTECTED] Sent: 30 October 2003 17:21 To: [EMAIL PROTECTED] Subject: Re: [FW-1] Nokia IP Clustering 3.7 Build29 - Cluster remove & rejpin] *** WARNING : This message originates from the Internet *** Hi, One of my collegues had the same issue while using multiple Cisco switches and trunks between them. This seemed to cause synchronization problems between the two cluster nodes. After snooping here and there he found that though the nodes are in forward mode, they use IGMP and multicast mac addresses when they first try to synchronize. However, it seems that the second node begins by first sending a "leave" and after that a "join" to subscribe to the multicast group, but the switches would not then agree ... I don't have all the details for now, but I was surprised to hear that the nokia boxes used IGMP even if not configured to. Regards, Emmanuel Bailleul ASCOM ADILAN -----Original Message----- Just out of curiosity, what types of hubs are people using? Is there a recommended one? We first had a switch, but had to quickly take that out and replace with a hub (generic DLink one). However I'm still having (less) occasional drops in the cluster with the DLink hub. Is there a brand/model someone is using now that they would recommend? Thanks, -JTM -----Original Message----- From: Sunjo [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 29, 2003 12:28 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] Nokia IP Clustering 3.7 Build29 - Cluster remove & rejpin Hi, I had the same issue and connecting a Hub for the cluster network resolved the problem.. Disable Checkpoint fwdemon monitoring the interface as well,. Cheers Sunil [EMAIL PROTECTED]> wrote: Hi all, Just wondered if anyone else has noticed issues with cluster members (IPSO 3.7 Build29 Forwarding mode - IP530's 1GB RAM + NG-AI) removing themselves & re-joining the cluster within a few seconds. It seems to occur sporadically (15mins or up to 1.5 hours). The entries are found in the system message log link from voyager. In addition the problem did not manifest itself whilst benchtesting, it only seems to have started since they went live. I have a pair of IP330's (same S/W versions - not heavily used) that are not experiencing this problem. TIA, Ross. Ross Bushby - Senior Security Architect Real Solutions Ltd, Unit B&C, Oakcroft Business Centre, Oakcroft Road,Chessington,Surrey,UK. KT9 1RH. Tel +44 (0)208 391 4080, Fax: +44 (0)208 391 4081 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= National Westminster Bank Plc, Registered in England No. 929027. Registered Office: 135 Bishopsgate, London EC2M 3UR. National Westminster Bank Plc is authorised and regulated by the Financial Services Authority and represents the NatWest Marketing Group. The Bank sells life polices, collective investment schemes and pension products and advises only on the Marketing Group's range of these products, on a With-Profit Bond produced by Norwich Union Life (RBS) Limited and also on the RBS Investment Funds ICVC operated by RBS Collective Investment Funds Limited. This e-mail message is confidential and for use by the addressee only. If the message is received by anyone other than the addressee, please return the message to the sender by replying to it and then delete the message from your computer. Internet e-mails are not necessarily secure. National Westminster Bank Plc does not accept responsibility for changes made to this message after it was sent. Whilst all reasonable care has been taken to avoid the transmission of viruses, it is the responsibility of the recipient to ensure that the onward transmission, opening or use of this message and any attachments will not adversely affect its systems or data. No responsibility is accepted by National Westminster Bank Plc in this regard and the recipient should carry out such virus and other checks as it considers appropriate. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
