You're best bet for redundancy for the switch would be to deploy a second switch with some sort of redundant connection with trunking between the two. Then, one each of your firewall's interfaces could go into each switch. The bigger issue is how far do you want to go with redunandancy? Do you want redunant ISPs? Redundant routers? Reduant switches? Does the business support this level of redunadancy? Just some thoughts...
-Mike ----- Original Message ----- From: "Christian Franke" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Monday, May 23, 2005 3:09 PM Subject: Re: [FW-1] Dual Network Cards and Redundancy > Hi Christopher, > > I am talking about two secureplatform installations with checkpoints > ha-mode, no load-balancing e.g. cluster xl. My situation is the > following: > > 1 Switch - 2 SPLAT-HA - internal net > > Now, I have to find a way to get redundancy for the switch, so my idea > was two network cards ore something else. > > br > christian > > 2005/5/23, Chris McGill <[EMAIL PROTECTED]>: > > Two Network cards on the same segment can't share the same IP address as this causes problems with the switching tables. Can you provide more information, what you are talking about is high availability and perhaps laod balancing. Look at ClusterXL, StoneBeat, RainWall, etc. Where a cluster IP address is shared by each SPLAT box and a multicast MAC. Then each SPLAT box has its own dedicated IP. Also you existing router may support similar functionality. > > > > Christopher McGill > > CCSA, CCNA, MCP > > > > ________________________________ > > > > From: Mailing list for discussion of Firewall-1 on behalf of Christian Franke > > Sent: Mon 23/05/2005 18:55 > > To: [email protected] > > Subject: [FW-1] Dual Network Cards and Redundancy > > > > > > Hi all together, > > > > I've been setting up two systems with secur platform-ha (R55W) which > > has both two network quad-cards installed. Is it possible to configure > > both network cards with the same IP addresses to provide two points of > > access from the network? The idea is that if one connection fails to > > the first quad-card, the network access to the the system starts > > automatically networking on the second quad-card. > > > > -- > > Christian Franke <[EMAIL PROTECTED]> > > -------------------------------------------------------- > > powered by Sun Java Linux Desktop > > -------------------------------------------------------- > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > This e-mail and any attachment is for authorised use by the intended recipient(s) only. It may contain proprietary material, confidential information and/or be subject to legal privilege. It should not be copied, disclosed to, retained or used by, any other party. If you are not an intended recipient then please promptly delete this e-mail and any attachment and all copies and inform the sender. Thank you. > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > > -- > Christian Franke <[EMAIL PROTECTED]> > -------------------------------------------------------- > powered by Sun Java Linux Desktop > -------------------------------------------------------- > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
