Don't know about IPSO, but given the similarity between VRRP and HSRP, this
may be a factor. On Cisco's the activation of HSRP automatically disables
the ICMP redirect messages that the router would generate. Maybe the same
applies?
Tom Sevy <[EMAIL PROTECTED]>@lists.us.checkpoint.com on 06/03/2001 11:59:47
Sent by: [EMAIL PROTECTED]
To: "Fw1-Wizards (E-mail)" <[EMAIL PROTECTED]>, "FWList
(E-mail)" <[EMAIL PROTECTED]>
cc:
Subject: [FW1] IPSO 3.2 and IP Redirects
If I have a local segment, 192.168.12.xxx/24, and in that segment I have
another router (192.168.12.1
Local Segment: 192.168.12.0/24
Default Gateway: 192.168.12.2 (VRRP from 2 x IP440)
Static Route in the IP440: 172.21.0.0/16 192.168.12.1 (router to other
segment)
When traffic goes from 192.168.12.xxx via 192.168.12.2 destined for
172.21.x.x, shouldn't the IPSO issue an IP redirect for the correct route?
I'm not seeing this when I sniff this scenario.
Any thoughts? Suggestions?
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
