-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

cisco4ng wrote:

| 1- In order to go >1Gbps throughput, I have to use
| Cluster Active/Active Multicast mode.  Because in muticast
| mode, there is NO pivot node, the traffics will hit all of the
| firewall thus 50% load on each firewall is expected.
| Is that correct?

How will you exceed the physical limitations of the network? Because you
need to have L2 connections for your cluster how do you think you can
bypass the Gb/s limit? All traffic will still be send to all nodes.

If you need to have higher throughput you must make a L3 decision before
and after the firewall. So you will not run a cluster but just N
parallel firewalls.

Or insert 10 Gb/s cards. Or bundle multiple Gb/s cards into a logical
interface. But I have not even searched to read if you can do that. Not
with SPLAT I guess.

As Scotty used to say: "You can't change the laws of physics."

Hugo.

- --
[EMAIL PROTECTED]               http://hugo.vanderkooij.org/
PGP/GPG? Use: http://hugo.vanderkooij.org/0x58F19981.asc

        A: Yes.
        >Q: Are you sure?
        >>A: Because it reverses the logical flow of conversation.
        >>>Q: Why is top posting frowned upon?

Bored? Click on http://spamornot.org/ and rate those images.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.7 (GNU/Linux)

iD8DBQFIHgdGBvzDRVjxmYERAg8RAJ9CeB6aB2joSAAMOQnDOxNQQRucFgCgqQit
/quWkyB+6fzOVTTkd+ikYNU=
=n7W6
-----END PGP SIGNATURE-----

Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to