I wouldn't go that far, it makes troubleshooting very difficult. However,
VRRP is used main for switching packets with neighboring routers so it is
acceptable. But not a feature, or any other weird excuse.
By the way, usually you do not allow a traceroute through a firewall
system, let me know if you require further advise on proper security
practice.
Regards,
HC
[EMAIL PROTECTED] on 05/18/2000 09:47:41 AM
To: [EMAIL PROTECTED]
cc: (bcc: Harry Chu/SIAC)
Subject: RE: [FW1] VRRP
The interface is not pingable for a good reason. If the interface show up
during a traceroute you would not know which firewall it is going through.
It is a feature!
-----Original Message-----
From: Harry Chu [mailto:[EMAIL PROTECTED]]
Sent: Thursday, May 18, 2000 8:40 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [FW1] VRRP
VRRP (monitor curcuits) Interface isn't ping'able.
HC
"Peter-Ch. Gentz" <[EMAIL PROTECTED]> on 05/18/2000 03:13:56
AM
Please respond to [EMAIL PROTECTED]
To: [EMAIL PROTECTED], hermit1 <[EMAIL PROTECTED]>
cc: (bcc: Harry Chu/SIAC)
Subject: Re: [FW1] VRRP
>
> I am trying to install a pair of Nokia 650's with VRRP. I can ping any
> interface with the actual IP addresses of either firewall, but not the
> virtual IP addresses. I see the packets arriving but no reply (using
> tcpdump). Doesn't matter if FW-1 is running or not - I checked that IP
> forwarding is on. Anyone have a suggestion?
>
>
Also other VRRP-Router do so
You have to live with this behaviour
Gruss
Peter-Ch. Gentz
(i.A. Charite Ref. V A Kommunikationsnetze)
DETECON Telephon: +49 30 2802-5223
Telefax: +49 30 2802-3615
Germaniastr. 18-20 E-Mail: [EMAIL PROTECTED]
D-12099 Berlin-Tempelhof
===========================================================================
=====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
===========================================================================
=====
===========================================================================
=
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
===========================================================================
=
====
===========================================================================
=====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
===========================================================================
=====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
