Correct, IPSO/CheckPoint are all that matter. Regarding different interfaces, yes you can do that. You would just setup VRRP to only monitor interfaces that both firewalls share. The primary box could have additional interfaces that you don't monitor.
Shane On Wed, 11 Aug 2004 18:47:54 +0200, Sascha Picchiantano <[EMAIL PROTECTED]> wrote: > Hi Shane, > > |> Yes, you can setup a VRRP/ClusterXL configuration with different > |> hardware devices. My only caution would be to make sure > |> that they are > |> close enough that they can run the same version of IPSO. > |> VRRP/ClusterXL don't care about the size of the hardware. > |> But they do > |> care about the OS and FW-1 version. > > so as long as my IPSO and Checkpoint software are the same, it doesn't > matter what machines it runs on, right? What happens if the failover > machine has less interfaces? Can I tell which interfaces are important > enough to keep running after a failover and which ones to keep down? Can > Checkpoint cope with that? > > |> For interface failures, will you be using VRRP or ClusterXL HA to > |> fail-over? VRRP can easily configure certain interfaces to watch or > |> ignore. ClusterXL can't, or at least it's much harder. > > I am planing on simple VRRP failover, no ClusterXL. > > > > Thanks, > Sascha > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
