just wondering do we have to set this "calculate IP based on network topology" also on the interoperable device for the peer gateway we have defiend on our policy, currently this is set to "main ip address
Thanks --- On Tue, 9/3/10, Peter Addy <[email protected]> wrote: From: Peter Addy <[email protected]> Subject: Re: [FW-1] New Site 2 Site VPN To: [email protected] Date: Tuesday, 9 March, 2010, 11:28 Hi Hi We did this and we lost vpn connectivity to all sites, I changed the setting back to use the "main IP address" of the cluster and it all started working again, does anyone have any idea why this is the case? i thought if you have Link Selection>based on "calculate IP based on network topology" it should use any of the backup addresses, has anyone managed to get his to work, and if so how Thanks --- On Fri, 26/2/10, Reinhard Stich <[email protected]> wrote: From: Reinhard Stich <[email protected]> Subject: Re: [FW-1] New Site 2 Site VPN To: [email protected] Date: Friday, 26 February, 2010, 19:27 hi, if you configure it right it will work :-) well - if you're usure test it or reconfigure it in a maintainance-window br reinhard At 15:13 26.02.2010, you wrote: >Thanks, but will this not break the other vpn connections that are >set to go to the main >address? > > >--- On Fri, 26/2/10, Reinhard Stich <[email protected]> wrote: > >From: Reinhard Stich <[email protected]> >Subject: Re: [FW-1] New Site 2 Site VPN >To: [email protected] >Date: Friday, 26 February, 2010, 13:38 > >At 12:13 26.02.2010, you wrote: > > > Current site to site VPNs terminate on the external facing > > cluster ip, but we have a requirement where we need to terminate > a new vpn to > > one of the topology interfaces defined in the topology which has > a VIP address, > > will this work and will this new vpn be able to access all in the > vpn enc don domain > > Is this possible? > >yes it is. have a look at the "link selection" settings in your >firewall-object or check the doku for link-selection > >br >reinhard > >-- Reinhard Stich [email protected] >Internet Security AG, 1100 Wien, Wienerbergstrasse 7 >Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 > >Scanned by Check Point Total Security Gateway. > >================================================= >To set vacation, Out-Of-Office, or away messages, >send an email to [email protected] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[email protected] >================================================= > > > > > >================================================= >To set vacation, Out-Of-Office, or away messages, >send an email to [email protected] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[email protected] >================================================= -- Reinhard Stich [email protected] Internet Security AG, 1100 Wien, Wienerbergstrasse 7 Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333 Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
