No state sync means that all clients running through your gateway must reconnect.
You can configure vrrp as this is a nokia feature without state sync, which is a checkpoint feature. Even with state sync, you can loose some connections (some tools are very network sensitive). You don't need extra interface to set vrrp. (but your vrrp interface should be configured to reduce its priority depending on other interfaces states). Hope this'll help. Nicolas Figaro > -----Original Message----- > From: Sascha Picchiantano [mailto:[EMAIL PROTECTED] > Sent: Saturday, February 28, 2004 11:55 AM > To: [EMAIL PROTECTED] > Subject: [FW-1] VRRP question - no state sync? > > Hi there, > > one of my clients wants a failover firewall. However, he is > one of those clients that don't want to spend money and go > with the smallest firewalls. > So he is currently using a Nokia 120. I explained to him that > this box doesn't properly support VRRP because there is no > extra ethernet interface to carry the state-sync stuff. > > Now I read on a data sheet about Nokia's new IP40 boxes, that > they can do VRRP without state-sync. Does that make sense? > What would be the drawbacks of having no state sync (other > than maybe having to reconnect current FTP or Telnet sessions)? > > Sascha ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
