If it hasn't come up before you should approach your ISP about setting up your routers with HSRP, or whatever their preferred active standby configuration is (since you already have two routers). This way you may get a brief blip as the virtual fails, but it doesn't require that your firewall cluster actually fails over and makes the process more seamless in case of an unexpected failure.
thanks for your response - in the end we did a manual failover to our slave by doing a cpstop on out master about an hour before the ISP was due to carry out their work. Then about 6 hours after their scheduled finish time we did a cpstart on the master and failed back - this worked fine.
I'm going to talk to our ISP's network guys to see if there is a better way to do this in the future ie in event of router failure. We have seen an unexpected master lockup and everything worked as planned however its the router stopping routing packets but staying 'up' that concerns me.
thanks ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
