Verify in the configurations of Switch if exists the entrance of virtual IPs that they were created for Cluster.
ex: Switch 6500 = arp <ip virtual fw-int> <mac-adress virtual> ARPA
You find referencais in Site of CheckPoint
I hope to have helped you
Cassio David Pereira wrote:
Hi...
We are trying to implement 802.1q in our environment. We have been problems to setup 802.1q on switches. We followed any CISCO documents about this but none sucess to implement this.
The our environment: - Cluster XL (two Secure Plataform machines); - Each machine is connect in diferents CISCO switches (6509 and 6506 respectively); - The CISCO switches have a TRUNK between them; - The 802.1q are configured on each Secure Plataform. Ex: Machine1 - eth1.400 - Vlan400 - 192.168.1.10 Machine2 - eth1.400 - Vlan400 - 192.168.1.11 To cluster object - virtual IP - 192.168.1.12 The configuration is finished to CheckPoint.
The configuration on switches are done, but something wrong is happening, because we have not traffic to firewalls like ping. With tcpdump, we can see in each machines (firewalls) that any packet are incoming, but all traffic that we try to send out is tagging.
I would like to know with any on has done this. Any on has the commands sequency to implement on switches.
I think that we are doing something wrong on switches configurations.
PS: I try to draw the picture bellow. Maybe help to understand what we are trying to do.
CLUSTER XL /----------------------------\ | FW1 | /-----------\vlan700 | eth1.700 ///// | | 6509 f0/37|----------------------/////--\ | \-----------/802.1q | vlan700 ///// | | T|| | 802.1q | | R|| | | | U|| | |HeatBeat| N|| | | | K|| | FW1 | | /-----------\vlan700 | eth1.700 ///// | | | 6506 f0/37|----------------------/////--/ | \-----------/802.1q | vlan700 ///// | | 802.1q | \----------------------------/
Thanks and regards,
Cassio David Pereira Analista de Seguran�a da Informa��o Tecnologia de Sistemas Centralizados ________________________________________ EDINFOR Solu��es Inform�ticas Ltda Av. Presidente Castelo Branco, 77 Cesar Souza - Mogi das Cruzes CEP 08820-460 - S�o Paulo - SP Tel: +55 11 2131-8872/2131-8800 - Fax: 2131-8840 http://www.edinfor.com.br/ [EMAIL PROTECTED] "Concentre-se no seu neg�cio, deixe a inform�tica conosco"
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
-- Wanderley Wal�rio Analista de Inform�tica PRODESP-DTISeguran�a Secretaria da Fazenda do Estado de SP Tel. 3243-3975
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
