Drving me loopy

[Danielpb]

I can't ping the VIP...this is also preventing remote users site updates.

The cluster has one interface setup to VLan on 2trunks..one of which is the public facing interface used the vrrp setup.

Fw monitor show the packet reaching the firewall interface but never sends a reply.

The switch information of the firewall is a cisco 6509 controlling the vlan trunking.

from the switch I can see the correct Mac address being applied to the correct ports and I have disabled Spanning tree.

what else can I look for??

cheers

[Routerkid1]

On SecurePlatform/Linux:
1. On the Security Gateway, edit the file $FWDIR/boot/modules/fwkern.conf (Note: Create fwkern.conf if it does not exist.)
2. Add the line:
fw_allow_simultaneous_ping=1
3. Reboot.

[Danielpb]

Hi Routerkid1,

As a test I applied the line:
fw_allow_simultaneous_ping=1

To the master module yet still the problem persisted. Can you confirm if the fwkern.conf needs to be edited to take affect?

cheers

[Routerkid1]

yes change this on both nodes and then reboot both firewalls

[Danielpb]

okay Ill give it a bash and let you know if it works....cheers