Do you have the FP3 hotfix for Nokia installed? This is required in order for 
state-sync to work properly.

Frank


=======================================
Frank Darden
Chief Technology Officer
Mission Critical Systems
3320 NW 53rd St. Suite 202
Fort Lauderdale, FL 33309
Phone (954)766-2550 x203
Fax (954-766-2580
AIM/MSN FishinCritical
 ===========================================


-----Original Message-----
From: nicolas figaro [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 07, 2003 12:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [FW-1] FP3 + nokia vrrp problem

It works perfectly on another nokia pair, without any NAT rule.
and it works without the fw1 loaded.
thanks anyway for your answer.

Nicolas Figaro

Reinhard Stich a �crit:

> hi,
>
> if you want to connect to network X from your vrrp-nodes, make a
> NAT-rule:
>
> <firewalls> -> <X> any  = = =
> <X> -> <firewalls> any  = = =
>
> cheers
> reinhard
>
> At 16:44 07.01.2003 +0100, you wrote:
>
>> hello,
>>
>> I configured two nokias with ipso 3.6 FCS 4 and CP FW1 NG FP3 in a
>> checkpoint cluster.
>> the nokias use vrrp for high availability (no load sharing).
>>
>> but if I try to send a connection from the backup, the packet is sent
>> with the vrrp address.
>> I still can reach the backup (ping, ssh works perfectly), but I can't
>> initiate any connection from the module
>> ( I need to initiate some supervision connections).
>>
>> If i perform a ftp unloadlocal, the backup can initiate connection, but
>> it's not a good solution.
>>
>> any idea ???
>>
>> thanks
>>
>> nicolas figaro
>> cdcixis capital markets
>>
>> =================================================
>> To set vacation, Out Of Office, or away messages,
>> send an email to [EMAIL PROTECTED]
>> in the BODY of the email add:
>> set fw-1-mailinglist nomail
>> =================================================
>> To unsubscribe from this mailing list,
>> please see the instructions at
>> http://www.checkpoint.com/services/mailing.html
>> =================================================
>> If you have any questions on how to change your
>> subscription options, email
>> [EMAIL PROTECTED]
>> =================================================
>
>
> --
> Reinhard Stich,   ASSIST    [EMAIL PROTECTED]
> Internet Security AG, 1190 Wien, Nussdorfer Laende 29-33
> Tel: +43 1 370 94 40  RS784-RIPE Fax: +43 1 370 94 40-10
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to