At the moment it's quite simple...
I agree it can be related to asymmetric routing, but is'nt suppose to be supported in load balancing mode? My current config in test is quite simple INTERNET <-> FW <-> LAN So the FW both have the same default gateway and the lan workstation all have the VIP FW address. Also I assume routing is fine since it work perfectly when any firewall is down or using High Availability Thank ML -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Monday, August 09, 2004 9:53 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] Synchronization problem with ClusterXL on Secureplatform Sounds like a problem with Asymmetric routing. Have you verified the routing both in front of and behind the firewalls? -Matt |---------+--------------------------------------------> | | Michel Lapointe | | | <[EMAIL PROTECTED]> | | | Sent by: Mailing list for | | | discussion of Firewall-1 | | | <[EMAIL PROTECTED]| | | KPOINT.COM> | | | | | | | | | 08/09/2004 05:34 AM | | | Please respond to Mailing list | | | for discussion of Firewall-1 | | | | |---------+--------------------------------------------> >----------------------------------------------------------------------- -----------------------| | | | To: [EMAIL PROTECTED] | | cc: | | Subject: [FW-1] Synchronisation problem with ClusterXL on Secureplatform | >----------------------------------------------------------------------- -----------------------| Hello, I currently evaluate ClusterXL on Secureplatform R55W and I'm experiencing what seem to be synchronisation issue while using the Unicast Load Sharing mode. If I shutdown either node, web browsing work flawlessly, but as soon as both node are up, web browsing performance is not as good, as it look like the packet are balanced across the firewall, but wait are dropped because of missing info in the state table... Does anyone know how to start troubleshooting this kind of problem? Thank ML ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
