Hugo van der Kooij wrote:
On the matter of exact VRRP handling you may noticed odd behaviour if you go from the list. Like ipclustering it requires an even closer bond between the various components.
speaking of ipclustering, i have an argument with a colleague of mine of state sync with check point over ipso clustering in loadsharing mode which goes like this:
I configured a cluster of nokias using ipso clustering with load sharing over multicast and check the 'synchornize connections' in the 3rd party cluster configuration tab and run into some problems when testing failover in the sense that pinging the external cluster ip address when I was rebooting one of the members i started seeing packets being lost in very weird and reproductible way:
first 5 packets were lost, then some came back, 3 packets lost again, then some would come back and then another 5 packets got lost and by that time either the second member would be completeley rebooted or shutdown.
after unchecking 'sync connections' in the cluster configuration tab and redoing the same test only one packet was lost, and by our understanding that would be during the failover which would be acceptable.
my colleague says that ipso clustering also takes care of the synchronization of the connections table over the two members while I disagree and say that in this case clusterxl is doing the sync while ipso clustering takes care of the other stuff.
my question would be: who's right ? :) and maybe someone more experienced with ipso clustering could shed some light on this issue.
thanks, sin ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
