kazeka sho a écrit :
Hello,
I am currently configuring a Nokia Cluster in VRRP mode active/passive in
IPSO 4.2 b042 HF003.
Everything is OK for the configuration.
But, I am making Static NAT with Checkpoint NGX R65 for some servers and I
would like to know how to do that because I know that I have to make
Proxy-ARP for the cluster but I did not see the entree for the VMAC I have
only the physical MAC of the interface.
Do I have to add it manualy or is there something wrong on my configuration?
The virtual arp is shown via an ifconfig on the device itself.
there are also some options to let the fw do automatic arp config, try
to see if it works fine with VRRP.
I would like to know if there is another solution instead of using Proxy ARP
such as by adding static route because I think the network design would not
the same as the one use by my interfaces. So my Nat address would not be
included in my network interfaces.
you can use a nated IP for which the FW doesn't have any interface on
the same nat.
configure your routing so the packets to this fake ip will be redirected
to the FW, then set your Nat.
Br
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
