Tom,

If it hasn't come up before you should approach your ISP about setting up
your routers with HSRP, or whatever their preferred active standby
configuration is (since you already have two routers).  This way you may get
a brief blip as the virtual fails, but it doesn't require that your firewall
cluster actually fails over and makes the process more seamless in case of
an unexpected failure.

Tim

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:[EMAIL PROTECTED] On Behalf Of Tom Brown
Sent: Saturday, February 11, 2006 2:57 PM
To: [email protected]
Subject: [FW-1] SPLAT HA Cluster Question

AI R55 on SPLAT in 2 module cluster

Our HA cluster is connected to our ISP via 2 seperate routers that they 
run. Our IP range is generally routed down from their primary router to 
our primary cluster member (we run master/slave config) and if our 
primary module fails our secondary will take over and the IP range will 
in turn be routed down from the secondary router by the ISP - This works 
as we have experienced a primary module lockup.

I have reveived notification from our ISP that they are doing some work 
on our primary router overnight and service to this router will be lost. 
In theory we will be OK as the secondary router will be online and the 
IP's routed from it by our ISP however will our HA cluster 'notice' the 
primary router failure and fail traffic over onto our slave firewall 
module? Should be have done anything/need to do anything to make sure we 
don't loose service diring this outage?

thanks

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to