Edit the cluster object.  On the "3rd party Config" tab, uncheck the
option "Hide Cluster Members' outgoing traffic behind the Cluster's IP
Address".

-- 
 David DeSimone == Network Admin == 214-800-7670 == [EMAIL PROTECTED]
    "The biggest cause of trouble in the world today is
     that the stupid people are so sure about things and the
     intelligent folk are so full of doubts." -- Bertrand Russell

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Tom
Brown
Sent: Thursday, October 27, 2005 8:53 AM
To: [email protected]
Subject: Re: [FW-1] Cluster using wrong IP address

> I've tried it, but it doesn't seem work :-( I've made a mistake in my 
> explanation below though, the second node isn't using the ip-address 
> of the first as I said before, it's using the virtual ip-address of 
> the cluster. Don't know if this changes anything for the solution 
> proposed below?

i have this same issue on a SPLAT R55 cluster - The 'slave' tries to
send packets out from the 'cluster' IP, which the 'master' currently
has, rather than from its own IP and obviously gets dropped -

If you find a solution please post to the list!

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to