Well, By complex VRRP you mean VRRP group I think, - a configuration could be the 3 firewalls in the same group with different priorities, but how can I get two firewalls active at the same time - an other configuration could be, fw1 and fw2 in group1 and fw2 and fw3 in group2 but a state could lead to: fw2 active for two groups ! And I can't resolve the enigma ! The reason for this is we designed the platform according to load specifications, the result is we need two firewalls, but we want N+1 redundancy, so 2+1 isn't it a good design ? Well, Reinhard I haven't understood the load you set to 100/100/1, I think you mean 2fw HA and one single ? Raul, We have our boxes don't want to use others or even spend money Our platforms already uses firewalls load balancing with alteon on checkpoint and others with netscreen, in my opinion we can bypass load balancing because of low trafic average, but we need to secure the architecture. Regards Rar
> Message du 25/03/08 22:15 > De : "Reinhard Stich" > A : [email protected] > Copie à : > Objet : Re: [FW-1] 3 firewalls configurations > > hi, > > is there any special reason for doing that? > > in nokia clustering you can for example manually > assign the load to cluster-nodes. so if you set > load to 100 / 100 / 1 the node with load 1 will > normally not get a single connection. > > br > reinhard > > At 15:40 25.03.2008, rar.mail wrote: > >Hi, > > > >I want to know if it possible to have a > >configuration with 3 firewalls, with two actives > >and one backup, without uses load balancers: > > > >For two firewalls we use vrrp but for more .... > >firewall load balancing, but any other solution ? > > > >Any functionnalities on checkpoint or firewall standards, ...? > > > >Regards > > > >rar > > > > Créez votre adresse électronique [EMAIL PROTECTED] > > 1 Go d'espace de stockage, anti-spam et anti-virus intégrés. > > > > > > > >Scanned by Check Point Total Security Gateway. > > > > > >================================================= > >To set vacation, Out-Of-Office, or away messages, > >send an email to [EMAIL PROTECTED] > >in the BODY of the email add: > >set fw-1-mailinglist nomail > >================================================= > >To unsubscribe from this mailing list, > >please see the instructions at > >http://www.checkpoint.com/services/mailing.html > >================================================= > >If you have any questions on how to change your > >subscription options, email > >[EMAIL PROTECTED] > >================================================= > > -- > Reinhard Stich [EMAIL PROTECTED] > Internet Security AG, 1150 Wien, Johnstrasse 29 > Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > > > Scanned by Check Point Total Security Gateway. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > Créez votre adresse électronique [EMAIL PROTECTED] 1 Go d'espace de stockage, anti-spam et anti-virus intégrés. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
