Michael,

StoneBeat FullCluster supports multiple external or internal interfaces.
>From FullCluster's point of view, the interfaces are simply either
"operative" (meaning regular network traffic:  DMZ, internal, external) or
"protocol" (the heartbeat) or "control" (the one for the license, and to
which the GUI should connect). The latter two can be combined on one
interface as well.

----------------------------------------------------------------
Mark Boltz                                       Stonesoft Corp.
Product Manager, StoneGate                     It�lahdenkatu 22a
[EMAIL PROTECTED]                      FIN-00210 Helsinki
Tel: +358-9-4767 11                                      Finland
Fax: +358-9-4767 1234
GSM: +358 40 763 5075                   http://www.stonesoft.com
    "Enabling the secure, highly available enterprise." (SM)



                    Michael Bryenton
                    <[EMAIL PROTECTED]>                   To:     
[EMAIL PROTECTED]
                    Sent by: Mailing list for discussion        cc:
                    of Firewall-1                               Subject:     [FW-1] 
Stonebeat FullCluster an multiple external
                    <[EMAIL PROTECTED]        interfaces +           
   VIP's
                    point.com>


                    02/03/2002 06:48 AM
                    Please respond to Mailing list for
                    discussion of Firewall-1






A question for all your guru's out there.

Does Stonebeat support a Gateway Cluster object with more than one external
IP?
The setup I propose would see a pair of Checkpoint NG firewalls with 3
external and 7 internal interfaces.
I want failover and load balancing for each of the interfaces - each
interface has a different subnet.
The 3 external all have a VIP's defined and six of the 7 internal
interfaces
have VIP's defined.

Suppose A,B,C are the external interfaces and D,E,F,G,H,I,J are the
internal
interfaces.

A would have VIP A_1
B would have VIP B_1
.
.
.
I would have VIP I_1
and J would be the heartbeat network.

How do I set this up with Stonebeat Fullcluster?
All examples I see of Fullcluster show 1 external cluster IP joining to 1
external interface per firewall ...
Is this all that it can do? Do I need 3 separate clusters to manage my 3
external subnets (so 6 firewalls in all)?
Is there some routing that can get around this?
And what about my internals subnets? Do I need 18 Clusters to handle this
configuration of all subnets (36 firewalls)?

Please advise.
Thank you.

Mike

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to