Thanks to all who replied. I'm currently upgrading my boxes to 3.3 :)
On Mon, Jan 08, 2001 at 03:45:14PM -0800, Konstantin Matev wrote:
> Then upgrade to IPSO 3.3.x and you should be able to ping the VIP address.
> It is an option supported in IPSO 3.3.0.
>
> -Dex
>
> -----Original Message-----
> From: Dave Dunaway (ncc0296) [mailto:[EMAIL PROTECTED]]
> Sent: Monday, January 08, 2001 3:12 PM
> To: Vince Kornacki
> Cc: 'Chris Arnold'; [EMAIL PROTECTED]
> Subject: Re: [FW1] IPSO VRRP issue
>
>
>
>
> Er...ok, but in the case where my cisco 6509 using msfc won't add an entry
> in its arp table because it can't ping the VRRP vip....what then? :)
> Any ideas?
>
> On Fri, Jan 05, 2001 at 04:58:54PM -0600, Vince Kornacki wrote:
> > Chris,
> >
> > Per RFC 2338, VRRP VIPs are not required to respond to echo-requests
> > (pings).
> >
> > Hope this helps.
> >
> > Vince Kornacki
> >
> > -----Original Message-----
> > From: Chris Arnold [ mailto:[EMAIL PROTECTED]
> > <mailto:[EMAIL PROTECTED]> ]
> > Sent: Friday, January 05, 2001 4:29 PM
> > To: [EMAIL PROTECTED]
> > Subject: [FW1] IPSO VRRP issue
> >
> >
> >
> > Hello. I just did the initial VRRP configuration on a pair of Nokias
> > (IPSO
> > 3.2.1). I followed the instructions in Nokia's knowledgebase and it
> > appeared to be correct. I'm seeing the VRRP traffic allowed in the FW
> > log
> > (CP 4.1 sp2) and netstat -rn and ifconfig -a from the command line(s)
> > show
> > the virtual IP address (and fail-over appears to work) but I can't ping
> > it.
> > There are no CP rules blocking this. Any thoughts?
> >
> > Thanks.
> >
> > Chris
> >
> >
> > ========================================================================
> > ========
> > To unsubscribe from this mailing list, please see the instructions
> > at
> > http://www.checkpoint.com/services/mailing.html
> > <http://www.checkpoint.com/services/mailing.html>
> > ========================================================================
> > ========
> >
>
> --
> Dave Dunaway [[EMAIL PROTECTED]]
>
>
> ============================================================================
> ====
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ============================================================================
> ====
--
Dave Dunaway [[EMAIL PROTECTED]]
Systems Administrator, AT&T Canada, IES
tel: (416)341-5932, fax: (416)341-5943
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
