Check the anti-spoofing configuration of your sync interfaces; it seems to
be defined as external -

Regards,
Lars Higham

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Michael
Schwartzkopff
Sent: Monday, March 15, 2004 8:04 AM
To: [EMAIL PROTECTED]
Subject: [FW-1] Configure cluster on IPSO

Hi,

I am configureing a cluster on an Nokia System:

2 x IP 350
IPSO 3.7.1 - b 0004
CHKP NG AI Build 318

I did set this system up as in the guide described, and it works (failover,
...)

But when I am configureing the sync net the filrewall keeps on telling me:

1 synchronization network(s) are external (defined also as interface), and
therefore insecure. Do you whish to continue?

I use a separate sync net (cross cable) and according to the topo
information on the mebmers and the cluster these interfaces are all defined
internal, Anti-spoofing -> This net.

Where is my error? Any hint?

=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
[EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to