VRRP and checkpoint ngx

[charliey_2000]

After configuring VRRP on the nokia and adding the cluster members in checkpoint is it normal for the get topology option to fail under the cluster interface. I can manually define the cluster ip information but I was expecting that it would be able to pull the information. I added as a simple 3rd party cluster with VRRP. I changed the network objective to cluster and then clicked get topology for the cluster object but it would not pull the interfaces automaticly. I think I have seen this work when configuring with Nokia cluster instead of VRRP.

[mcnallym]

It won't pull the VRRP address into the topology. It will only pull the interface information.

You need to manually enter the cluster/vrrp ip address under the topology in a vrrp pair.

[charliey_2000]

Thanks. I was just wondering if something was wrong. I couldnt find documentation that mentioned it.

[cciesec2006]

Charliey,

I actually tested this with IPSO 4.1 build 19 (eight months ago) and
Checkpoint NGx R61 with HFA_01 at my previous job and I can say that
sometime it works, sometime it does not. There was no consistency
to this. I asked Nokia TAC about it but they couldn't help either.

In other words, sometimes it works sometimes not in vrrp mode.

[babik]

Hi,

I have expirience with IPSO 4.1 and 4.2 with R65 and it always wokred fine,
the 'get topology' pulled the sync interfaces.

[dinesh_ymca]

HI,
We have configred nokia IPSO clustering in 4-5 gateways and pulling the topology has been successfull always. Idally it should work. But if its not causing any issues in your setup then its fine.
Best Regards
Dinesh
The world of technology
(good technical articles)