Bob,
Appologies, haven't been following this tread.
However, what use will there be in VRRP if you are setting up load
distribution via Routing(bgp,ospf, or whatever) VRRP provides virutal
addresses w/ monitoring of IFs in addition to real address, correct. If
you are routing different network through 1 of 2 IPSOs what is the value
add in the Virtual Address. My understanding is that you will need the
neighboring routers to forward packets to the REAL IP addresses of one of
the IPSOs via routes learned from the routing environment. You can not
forward to the virtual address since the VIP represents both IPSOs and in
the normal situation the primary will always get the packet.
The way I see it is that you turn off VRRP once you decide to use routing
for load distribution. Also, one negitive about this is that you can only
distribute based on network, and it is alot to manage since the firewall's
state must be maintained. However it is a very clean solution once setup
correctly.
HC
Bob Brandt <[EMAIL PROTECTED]> on 05/30/2000 10:20:26 AM
Please respond to [EMAIL PROTECTED]
To: Shimon Silberschlag <[EMAIL PROTECTED]>
cc: [EMAIL PROTECTED] (bcc: Harry Chu/SIAC)
Subject: Re: [FW1] Nokia & Load Balancing
Yes. 2 Nokias with the proper VRRP and BGP4 (since you don't want any
other
external routers), will do what you
want.
Bob Brandt, 3M, [EMAIL PROTECTED]
Shimon Silberschlag wrote:
> Can anyone set the record straight and give a definitive answer to
> this question:
>
> Can 2 Nokia appliances provide a load balancing solution (not HA but 2
> machines balancing the load) without using additional
> hardware/software (just the appliances with whatever modules you need
> from CP; No OSPF, switches, RadWare etc.)
>
> Regards,
>
> Shimon Silberschlag
>
>
===========================================================================
=====
> To unsubscribe from this mailing list, please see the instructions
at
> http://www.checkpoint.com/services/mailing.html
>
===========================================================================
=====
===========================================================================
=====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
===========================================================================
=====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
