On Tue, May 22, 2001 at 11:42:19AM -0400, Jim Snell wrote:
: My company is running 2 nokia IP330's in a VRRP failover with 4.1SP1. We
: would like to Static NAT 1-3 machines behind the firewall. First, is this
: possible with VRRP? i.e., is it possible to set this up in a way so the
: arp'ed address will failover to the secondary 330 if the primary dies?
: Second, if this is possible, is it advisable? NAT is more overhead for the
: firewalls, but we dont expect significant traffic for these few machines. A
: static NAT will save us time and effort as we can roll these machines into
: our existing structure, but VRRP must work seemlessly for reliability.
Sure.. Just make sure the MAC address you use for the published arp is
the VRRP MAC address.
--
Jason Costomiris <>< | Technologist, geek, human.
jcostom {at} jasons {dot} org | http://www.jasons.org/
Quidquid latine dictum sit, altum viditur.
My account, My opinions.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================