Apparently Nokia IPSO 3.3 will respond to echo requests to the VRRP address
though I have not upgraded in boxes yet.
-----Original Message-----
From: Frank Darden
To: 'Chris Arnold'; [EMAIL PROTECTED]
Sent: 1/6/01 10:49 AM
Subject: RE: [FW1] IPSO VRRP issue
According to the VRRP RFC, the virtual IP should not respond to ICMP.
So,
good news! You most likely have things configured properly. I am
assuming
that you are using monitored circuits..
Frank
-----Original Message-----
From: Chris Arnold [mailto:[EMAIL PROTECTED]]
Sent: Friday, January 05, 2001 5:29 PM
To: [EMAIL PROTECTED]
Subject: [FW1] IPSO VRRP issue
Hello. I just did the initial VRRP configuration on a pair of Nokias
(IPSO
3.2.1). I followed the instructions in Nokia's knowledgebase and it
appeared to be correct. I'm seeing the VRRP traffic allowed in the FW
log
(CP 4.1 sp2) and netstat -rn and ifconfig -a from the command line(s)
show
the virtual IP address (and fail-over appears to work) but I can't ping
it.
There are no CP rules blocking this. Any thoughts?
Thanks.
Chris
========================================================================
====
====
To unsubscribe from this mailing list, please see the instructions
at
http://www.checkpoint.com/services/mailing.html
========================================================================
====
====
========================================================================
========
To unsubscribe from this mailing list, please see the instructions
at
http://www.checkpoint.com/services/mailing.html
========================================================================
========
---------------------------------------------------------------------
This correspondence is for the named person's use only. It may
contain confidential or legally privileged information or both.
No confidentiality or privilege is waived or lost by any
mistransmission. If you receive this correspondence in error, please
immediately delete it from your system and notify the sender. You
must not disclose, copy or rely on any part of this correspondence
if you are not the intended recipient.
Any views expressed in this message are those of the individual sender,
except where the sender expressly, and with authority, states them to
be the views of DeMorgan Pty Ltd.
This e-mail has been checked for known Viruses. It is the responsibility
of the receiver to check their system for infected files and any such
file is deemed not to be the responsibility of DeMorgan.
---------------------------------------------------------------------
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
