sync interface connectivity

[bahuguna_praveen]

HI All,

I am configuring two nokia IP 390 running checkpoint NG AI in VRRP cluster, please tell me which is the best way to connect two fireawll interface directly using cross cable or indirectly through a switch.

Though adding a switch can cause single point of failure.
Please suggest.
Regars

[mcnallym]

Check Point suggest using a switch rather then a crossover cable. Either way leaves you with a single point of failure, the cable or the switch, the solution for which is to configure a 2nd synch link to use in the event of failure of the main synch link.

The reason they suggest switch is that if the cable fails with the switch at least one of the boxes will still show all interfaces up.

[bahuguna_praveen]

thanks for your reply it make more sense..