Yes, the way I made it work was creating two separate tags, so I guess it will not help you.
In my case we were talking about two IPs in completely separate IP ranges so creating the VLANs and configuring the switch port that connected to that interface of the firewall to work as a trunk, solved the issue. According to Check Point support, VLANs is the only way to handle more that 1 IP per interface when working with Cluster XL, so I don't really know if there is a way to do what you need. Regards On 8/6/07, Eric Appelboom <[EMAIL PROTECTED]> wrote: > > Sergio, my problem is that I want these subnets to be part of one vlan and > I > do not wish to split subnets into a different vlan each. > > In your example below you are creating two tagged vlan interfaces right? > > Eric > > > On 8/6/07 5:58 PM, "Sergio Alvarez" <[EMAIL PROTECTED]> wrote: > > > What does not work is precisely adding a Secondary IP via sysconfig, > what IS > > supported and works fine (I have it working with one of my customers), > is > > creating VLANs on the interface you need to put more than one IP. > > > > In my case I had IPs X and Y and so I created VLAN 3.2 and VLAN 3.3 on > eth3 > > and assigned those IPs to each one of the VLANs. Smart View Monitor > shows > > only the first VLAN IP and I believe some other CLI commands outputs > were > > showing just the first IP, but the cluster works fine. > > > > On 8/6/07, Eric Appelboom <[EMAIL PROTECTED]> wrote: > >> > >> Checkpoint states that adding a secondary vip is not supported in > >> clusterxl #sk31821 below. > >> Has anybody got a unsupported way to get this to work? (splat R65) > >> > >> cphaprob -a if always only lists physical and vlan interfaces and only > >> one vip. > >> If I have a host on the network I can ping all the other virtuals I > have > >> defined on other interfaces. (arp-replies) > >> For all the other vips\subnets I get no answer. > >> > >> Last Modified: 22-Apr-2007 > >> Symptoms > >> > >> * A secondary IP address that has been defined in sysconfig in > >> ClusterXL does not work. > >> > >> Cause > >> Secondary IP addresses are not supported in ClusterXL. > >> Solution > >> No fix is required, since the system is functioning as designed. > >> Applies To: > >> > >> * Secondary IP > >> > >> ================================================= > >> To set vacation, Out-Of-Office, or away messages, > >> send an email to [EMAIL PROTECTED] > >> in the BODY of the email add: > >> set fw-1-mailinglist nomail > >> ================================================= > >> To unsubscribe from this mailing list, > >> please see the instructions at > >> http://www.checkpoint.com/services/mailing.html > >> ================================================= > >> If you have any questions on how to change your > >> subscription options, email > >> [EMAIL PROTECTED] > >> ================================================= > >> > > > > > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > -- Sergio Alvarez (506)8301342 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
