Nokia IP clustering and firewall load balancing

[BarryStiefel]

Nokia IP clustering and firewall load balancing



IP Clustering allows you to do load sharing for VPN functions. However, each Nokia IP Security Platform must have a normal FireWall?-1/VPN-1 License--i.e. a license that is capable of performing standard firewall and VPN functions. No special licenses (i.e. ClusterXL?) are necessary. Several documents that describe this setup can be found on http://www.digitalmigrations.com.

ClusterXL (Check Point's load sharing feature) is not currently supported on IPSO, though it is planned for a future release.

-- PhoneBoy - 01 Jan 2004

FAQForm FAQs.Class: FAQs.OS: OsNokiaIPSO FAQs.Version:

[Lackie]

Unfortunately, digitalmigrations doesn't have the pdf's that it used to. Nokia does have some on their support site.

Clustering setup for R54 and above - Resolution 17909.

[mooselite]

For VPN-1 licensing in an IP Cluster, you can get away with 1 standard license and 1 HA license. It saves some money and works the same way two standard licenses would.

[linuxsrc]

the envirment:
|--VPN-1---LinkProof---ISP1
LAN | \/ \/
| /\ /\
|--VPN-1---LinkProof---ISP2

the CheckPoint VPN-1(version NG with AI) running on NOKIA IPSO3.8

in cluster mode.

VPN client use securemote mode(not securclient),

the VPN client application traffic is not stable.

help me,thanks!