CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 52 attendees signed up from 14 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-10-30
bgrenda bgrenda is offline
Junior Member
 
Join Date: 2006-10-25
Location: Poznan, Poland
Posts: 7
Rep Power: 0
bgrenda has an average reputation (10+)
Default Cluster XL SecurePlatform: OSPF problem

Environment: Two SecurePlatform Pro NGX R61 machines working in ClusterXL HA New mode.

Only one cluster member (active) sets up OSPF neighbourship with OSPF DR node. The other one has only static routes in its routingtables. "Router" configurations are the same.

Is this standard behaviour?

Bart
Reply With Quote
  #2 (permalink)  
Old 2007-05-25
brixo brixo is offline
Junior Member
 
Join Date: 2006-06-08
Posts: 8
Rep Power: 0
brixo has an average reputation (10+)
Default Re: Cluster XL SecurePlatform: OSPF problem

Bart,

I am having the same issues - that is, in fact, if this is an issue and not how it is meant to work!!

I have 2 CPFW's in ClusterXL on SPLAT Pro advertising routes via OSPF. It only seems to advertise routes from the "ACTIVE" node, which is fine. But when the "ACTIVE" node fails, there is a long delay before the second node gets its routes into the Cisco's routing table...

I suppose we could alter the OSPF timers on both Cisco and SPLAT, however, I am very aware of altering OSPF timers and the issues that they can cause.

So, if anyone knows how to get both routes from both SPLAT boxes into the Cisco routing table - I appreciate they will have to be equal metric/cost to be in the Cisco routing table due to OSPF mechanism... please let me know!

thanks all.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 15:55.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0