I don't think that is the issue. It shouldn't be making a connection with the vrrp address. At least mine doesn't. I am 4.1 SP6 / IPSO 3.5 FCS8. Is the primary doing the same thing, or is it initiating connections on its physical IP?
-Aaron -----Original Message----- From: Reinhard Stich [mailto:[EMAIL PROTECTED]] Sent: Tuesday, January 07, 2003 9:11 AM To: [EMAIL PROTECTED] Subject: Re: [FW-1] FP3 + nokia vrrp problem hi, if you want to connect to network X from your vrrp-nodes, make a NAT-rule: <firewalls> -> <X> any = = = <X> -> <firewalls> any = = = cheers reinhard At 16:44 07.01.2003 +0100, you wrote: >hello, > >I configured two nokias with ipso 3.6 FCS 4 and CP FW1 NG FP3 in a >checkpoint cluster. >the nokias use vrrp for high availability (no load sharing). > >but if I try to send a connection from the backup, the packet is sent >with the vrrp address. >I still can reach the backup (ping, ssh works perfectly), but I can't >initiate any connection from the module >( I need to initiate some supervision connections). > >If i perform a ftp unloadlocal, the backup can initiate connection, but >it's not a good solution. > >any idea ??? > >thanks > >nicolas figaro >cdcixis capital markets > >================================================= >To set vacation, Out Of Office, or away messages, >send an email to [EMAIL PROTECTED] >in the BODY of the email add: >set fw-1-mailinglist nomail >================================================= >To unsubscribe from this mailing list, >please see the instructions at >http://www.checkpoint.com/services/mailing.html >================================================= >If you have any questions on how to change your >subscription options, email >[EMAIL PROTECTED] >================================================= -- Reinhard Stich, ASSIST [EMAIL PROTECTED] Internet Security AG, 1190 Wien, Nussdorfer Laende 29-33 Tel: +43 1 370 94 40 RS784-RIPE Fax: +43 1 370 94 40-10 ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= . ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
