On Wed, May 17, 2000 at 01:12:23PM -0700, hermit1 wrote:
> I am trying to install a pair of Nokia 650's with VRRP. I can ping any
> interface with the actual IP addresses of either firewall, but not the
> virtual IP addresses. I see the packets arriving but no reply (using
> tcpdump). Doesn't matter if FW-1 is running or not - I checked that IP
> forwarding is on. Anyone have a suggestion?
You can not ping the VRRP IP address. IPSO discards all packets to the
VRRP IP address (unless they are somehow caught by FireWall-1 before
IPSO sees them). This is per RFC 2338.
-- PhoneBoy
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
