Philippe, This is not an answer to your problem but as I read that you managed to configure Cisco 2950 switches with static multicast entries for interesting ports I'm interrested to know how you did that.
Indeed, in an older post on the FW1-Gurus mailing list I mentionned that I had problems doing that on other Cisco models: > * on a 3750 : > switch(config)# mac address static 0100.5Exx.xxxx vlan 174 int gi1/0/9 > --> error message : "Supports only l3-ipmulticast addresses" > * on a 3548 > switch(config)# mac static 0100.5Exx.xxxx fa0/5 > --> error message : "This addres may not be added/modified" (see full post here for details: http://oldfaq.phoneboy.com/gurus/200512/msg00156.html) What exact Cisco model do you use, with which IOS version / std image or enhanced image...? Thanks if you can help :) Regards Alain PS : I do speak french as well (not on the list then) > -----Original Message----- > From: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] On Behalf > Of Philippe Blavier > Sent: Monday, January 02, 2006 3:21 PM > To: [email protected] > Subject: [FW-1] Strange behaviour with IPSO Clustering > running Multicast Mode > > Hi all, > > I am testing an IPSO cluster with two IP380 boxes running > IPSO 3.9 build > 41. > The cluster is connected to 3 Cisco Switch (2950 Layer2 and 4006 Layer > 3). On switches I have configured the static multicast entries for > interesting ports. > > I can create the cluster on the first box and the second box > is able to > join the cluster. > > The strange behaviour is that some workstations on the LAN > are randomly > not able to reach the inside VIP, while others computers are > able to!!! > > If I switch the cluster to FORWARD mode all is OK. > Regarding the FORWARD mode I was wondering which interface is used by > the master to forward packets to the slave (if it decides the > slave has > to process the packet) ? > > > Thanks > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
