Hi Lino,

we also tried to setup "secondary" interfaces on IPSO 3.8 + CP R55 AI and 
ran into the same problem. The only way to have one physical interface 
with more than one IP was setting up VLANs. In that case you would need 
also an switch with vlan functions and set it up accordingly. I think that 
would be the "cleaner" solution and in fact provided us with a lot of 
"virtual" interfaces over one cable separating "physicaly" our departments 
over one real link improving this way inter-departamental security. That 
way we got two Nokia 380 with IP Clustering over 31 interfaces. CheckPoint 
treats all the interfaces the same way altough we only have 10 real 
interfaces.

I hope that this can help you a bit and if you need any further help 
please let me know,

Regards,

Eric Janz 
Departamento de Sistemas
Grupo Barceló Viajes

C\ 16 de Julio, 75
07009 Polígono Son Castelló
Palma de Mallorca - Baleares
Tel.: +34 971 448030
Fax.: +34 971 436986



Lino Eduardo Avila Rodríguez <[EMAIL PROTECTED]> 
Enviado por: Mailing list for discussion of Firewall-1 
<[email protected]>
30/11/2005 19:19
Por favor, responda a
Mailing list for discussion of Firewall-1 
<[email protected]>


Para
[email protected]
cc

Asunto
[FW-1] IP Clustering






Help Help!!

I've configured the IP Clustering but I have one issue. The external
interface has a subinterface.

The configuration of the interface eth0c0 is:
148.x.x.252
200.x.x.252

On the other nokia interface eth0c0 is:

148.x.x.253
200.x.x.253

In the cluster configuration when I try to set up a cluster for the
200.x.x.254

I got an error that the interface eth0c0 already has a cluster interface
configured.

I read in nokia that multi addressed interfaces are not supported in the 
3.6
release. Would it be supported in IPSO 3.9?

Any thoughts??


Lino E. Avila

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to