CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
3. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-11-13
ggiants81 ggiants81 is offline
Junior Member
 
Join Date: 2007-10-09
Posts: 4
Rep Power: 0
ggiants81 has an average reputation (10+)
Default ARp issue in R55 HA enviroment

Hi there all.
I have a strange issue in with my SPLAT cluster, new HA mode.
When I push a policy the router that connects a customer receives the standby modules mac adress and traffic from the customer is passed to this macadress instead of my active nodes cluster mac.

We have several other connections that don't have this issue, the only exception is that we use a cisco 2960G switch for this connection.
Have anyone had this kind of behaviour, and how did you solve it ?

Regards, Joel
Reply With Quote
  #2 (permalink)  
Old 2007-11-13
willr willr is offline
Junior Member
 
Join Date: 2007-10-09
Posts: 18
Rep Power: 0
willr has an average reputation (10+)
Default Re: ARp issue in R55 HA enviroment

I had a similar problem, but I am running active/active mode with Nokia Clustering. Not sure if your type HA works the same, but here is our answer.

we put a static entry for the cluster virtual IP and virtual cluster MAC, problem solved.
I did have a TCP dump showing the firewalls doing gratuitous ARP with the Virtual IP/Virtual MAC but the cisco would not listen to it.

While it might not be the same problem I hope this helps. I know what its like to have my back against the wall like this!
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 11:23.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0