NGX R61 Nokia Cluster / Antispoofing problem

[tobes]

I manage a site which is running a 2 firewall Nokia cluster, one network communicating through the firewall passes a router before going to the firewall. This is therefore legitimate traffic but it is being dropped by the antispoofing as you would expect.

I have edited the individual gateways to use a specific network which included both the connected network and the network address space one hop away yet it is still dropping the packets due to antispoofing.

In addition to this I tried turning off antispoofing on all interfaces (just as a test) and the same problem occured even though the smart defense reported the gateways as having antispoofing switched off !

Anybody with any ideas would be appreciated.

[david]

may be a daft question, but are you pushing policy after updating the anti-spoofing configuration?

[tobes]

yes i do ! :-)

[sanjay388]

Dear all

Plz help out for the cluster configuration of nokia firewall with VRRP Dear all wt is requirment if i unplug the cable of one firewall all the network should be shifted to another firewall


Thanks & Advanced

Sanjay kaushal
MCSE,CCNA,CCSA