CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
3. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Dynamic Routing
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-02-07
sako2006 sako2006 is offline
Junior Member
 
Join Date: 2006-07-28
Posts: 1
Rep Power: 0
sako2006 has an average reputation (10+)
Default Past Experience with SPLAT OSPF

In our production environment, we are thinking about using the SPLAT's OSPF to distribute dynamic routes to internal Cisco routers. The SPLAT is running in CLUSTERXL's loading sharing mode. I have read some issues about the OSPF in this user group. I would like to hear more past experience or issues from other people. Thanks for your input.
Reply With Quote
  #2 (permalink)  
Old 2007-02-12
baboo baboo is offline
Junior Member
 
Join Date: 2006-02-20
Location: Switzerland, Burgdorf
Posts: 22
Rep Power: 0
baboo has an average reputation (10+)
Default Re: Past Experience with SPLAT OSPF

hmm...

It works really good..

.. as long as you
  • don't install a changed policy
  • don't have a fail-over

Well, this may be just our specific problems... (CP first stated that we're the only, who have these problems... after a loooooong time they mentioned that another customer has similar issues.. CP is now investigating this case with an external routing specialist... I will post any updates to this issue here [1])

If you still want to try it, I suggest you strongly to try this first in a isolated test-environment!
Try to use the same devices (also the same IOS-Versions in case of cisco-devices).
Test fail-overs and policy-installations when one node isn't running.
Check if you still have all routes on the peripherial ospf-devices after a fail-over (we have seen some really weird stuff!)
Check if your other OSPF-devices are capable to do a graceful restart (RFC3623 (section 4)) which should be configured to ensure a minimal interrupt.

[1] SPLAT PRO, OSPF and Cluster => Interrupt while Policy inst.
__________________
To know recursion, you must first know recursion-1
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 15:56.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0