CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA or CCSE One-Week Certification Training Courses with CPUG in Beautiful San Francisco!
    R70 CCSA Courses Starting (2010) 6/7, 7/12, 8/9, 10/11, 11/8, 12/6.  R70 CCSE Courses Starting (2010) 8/16.
2. CPUG CON 2010 EUROPE, the User Conference in Switzerland, September 20th-22nd, 2010!
3. Join Our CPUG Groups On LinkedIn and Facebook.  See Our Channel on YouTube.


Go Back   CPUG: The Check Point User Group > High-End Security > VPN-1 VSX
Register Projects FAQ Members List Social Groups Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 2010-03-02
Junior Member
 
Join Date: 2009-10-27
Posts: 3
Rep Power: 0
evanc has an average reputation (10+)
Default VSX instance not seperate route tables

Hi,
we run static routing on
1/ a pair of VSX Nokia boxes running NGX R65
2/ a pair of VSX Nokia boxes running NG +AI ( R54/55)

The pair running R65 have seperate routing tables per instance
The pair running NG +AI ( R54/55) seems to show all routes in any instance (static arp entries are seperate).

has anyone come across this before?
Reply With Quote
  #2 (permalink)  
Old 2010-03-02
Senior Member
 
Join Date: 2005-08-14
Location: Gig Harbor, WA, USA
Posts: 809
Rep Power: 5
PhoneBoy has an average reputation (10+)
Default Re: VSX instance not seperate route tables

Which versions of IPSO are involved? I'm guessing IPSO 5.0 for the R65 boxes and IPSO 3.7.89 or similar for the R54/R55 boxes. Has the behavior always been this way or did it just start? Perhaps a reboot is in order. Or an upgrade, since R5x stuff is surely end of support :)
Reply With Quote
  #3 (permalink)  
Old 2010-03-03
Junior Member
 
Join Date: 2009-08-06
Posts: 8
Rep Power: 0
deimoss has an average reputation (10+)
Default Re: VSX instance not seperate route tables

All routes that have been added with 'propagate to adjacent virtual devices' will do that, i.e. all the other VS on the system will see these routes.
There is a column in the far right of the route list in the GUI which will show you which have been set to propagate.
Reply With Quote
  #4 (permalink)  
Old 2010-03-15
Junior Member
 
Join Date: 2009-10-27
Posts: 3
Rep Power: 0
evanc has an average reputation (10+)
Default Re: VSX instance not seperate route tables

R65 ipso = IPSO-5.0-BUILD067-06.16.2009-184058-1515

R55 ipso = IPSO-3.9.91-BUILD014-11.06.2006-192810-1515

All of the output = No in regards to route propagation

Some history that might assist:
1/ in the past, we have published routes using Voyager instead of on dashboard.
2/ Also we have tried to build a new virtual instance and had it fail (holding off until we upgrade to R65 now).
Reply With Quote
Reply

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 23:48.


Powered by vBulletin® Version 3.8.5
Copyright ©2000 - 2010, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.5.1