CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


** Announcing the #CPUGchallenge **

I'm very happy to announce that CPUG will be hosting "The CPUG Challenge" during CPX this year.
It promises to be a fun and interesting event that will test (and maybe even expand) your knowledge of Check Point.
Whether or not you plan to attend CPX, we have something for you. Please check out this post or the CPUGchallenge.com web site for more information. -E

 

Results 1 to 11 of 11

Thread: Which HA and Load sharing protocol support IPv6

  1. #1
    Join Date
    2006-06-18
    Location
    Hong Kong
    Posts
    15
    Rep Power
    0

    Default Which HA and Load sharing protocol support IPv6

    Is it SecurePlatform's ClusterXL only support IPv6 on HA mode which it is not support on Load Sharing(active-active mode)?

    Is it only Nokia IPSO's VRRP(HA) and IP Clustering(load sharing) support IPv6 on both modes?

    Actually, I am looking for load sharing solution to support IPv6. If anyone have idea, please feel free to comment and thanks.

  2. #2
    Join Date
    2006-06-18
    Location
    Hong Kong
    Posts
    15
    Rep Power
    0

    Default Re: Which HA and Load sharing protocol support IPv6

    Tested, IPSO 6.1 or 4.2 currently only support IPv6 HA mode with R65 which R65 CP sync did not support session failover.
    Simon
    CCSE+ NGX, NCSM

  3. #3
    Join Date
    2008-03-31
    Posts
    5
    Rep Power
    0

    Default Re: Which HA and Load sharing protocol support IPv6

    Hi there,

    Does anyone know the latest status of IPv6 HA on a HA cluster Checkpoint Firewall-1/VPN-1 running over SPLAT OS (Linux Kernel 2.4) ?

    Thanks!
    Arnaud.

  4. #4
    Join Date
    2006-03-10
    Location
    CA
    Posts
    19
    Rep Power
    0

    Default Re: Which HA and Load sharing protocol support IPv6

    I am wondering the same thing (SecurePlatform's ClusterXL support IPv6 on HA mode) on 2.6 kernel...

  5. #5
    Join Date
    2006-11-06
    Posts
    4
    Rep Power
    0

    Default Re: Which HA and Load sharing protocol support IPv6

    Anyone know when ClusterXL load sharing mode supports ipv6? R80.10?

  6. #6
    Join Date
    2005-08-14
    Location
    Gig Harbor, WA, USA
    Posts
    2,206
    Rep Power
    14

    Default Re: Which HA and Load sharing protocol support IPv6

    As far as I know, it's not planned for R80.10.
    http://phoneboy.com
    Unless otherwise noted, views expressed are my own

  7. #7
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    840
    Rep Power
    12

    Default Re: Which HA and Load sharing protocol support IPv6

    Why, oh why do you need load sharing on either v4 or v6? For almost 15 years it is a very bad idea
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

  8. #8
    Join Date
    2005-08-14
    Location
    Gig Harbor, WA, USA
    Posts
    2,206
    Rep Power
    14

    Default Re: Which HA and Load sharing protocol support IPv6

    I've never understood what load sharing gives you that a properly sized active/standby solution does not.
    http://phoneboy.com
    Unless otherwise noted, views expressed are my own

  9. #9
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    840
    Rep Power
    12

    Default Re: Which HA and Load sharing protocol support IPv6

    Quote Originally Posted by PhoneBoy View Post
    I've never understood what load sharing gives you that a properly sized active/standby solution does not.
    20 soemthing years ago, when networks were slow with just a few connections, using LS clustering allowed doubling capacity. You may remember, Nokia even had to come up with IP clustering, cumbersome as it was.

    Today the benefits of LS are outweighed by inconveniences, limitations, etc.
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

  10. #10
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    1,931
    Rep Power
    10

    Default Re: Which HA and Load sharing protocol support IPv6

    Quote Originally Posted by varera View Post
    20 soemthing years ago, when networks were slow with just a few connections, using LS clustering allowed doubling capacity. You may remember, Nokia even had to come up with IP clustering, cumbersome as it was.

    Today the benefits of LS are outweighed by inconveniences, limitations, etc.
    Gotta agree with Val here, Load Sharing is a great concept but violates the KISS principle bigtime. Keep it simple...
    --
    My book "Max Power: Check Point Firewall Performance Optimization"
    now available via http://maxpowerfirewalls.com.

  11. #11
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    840
    Rep Power
    12

    Default Re: Which HA and Load sharing protocol support IPv6

    Quote Originally Posted by ShadowPeak.com View Post
    Gotta agree with Val here, Load Sharing is a great concept but violates the KISS principle bigtime. Keep it simple...
    It is not even mostly about keeping it simple. Multiple limitations when invoking LS outweigh any potential benefits today. But yes, troubleshooting LS is cumbersome
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

Similar Threads

  1. Protocol ipv6 and SIT - how to drop?
    By sisu-up in forum Services (TCP, UDP, ICMP, etc.)
    Replies: 0
    Last Post: 2010-06-25, 11:47
  2. VSX R67 and P1 R70.30 IPV6 Support
    By sisu-up in forum VPN-1 VSX
    Replies: 1
    Last Post: 2010-06-22, 14:15
  3. IPv6 support in VSX
    By dys152 in forum VPN-1 VSX
    Replies: 1
    Last Post: 2009-11-30, 11:08
  4. ISP redundancy on load sharing and Qos
    By idofri in forum ISP Redundancy
    Replies: 1
    Last Post: 2009-01-01, 04:24
  5. Nokia IPSO cluster only support Checkpoint Load Sharing?
    By longname in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 4
    Last Post: 2006-08-22, 05:46

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •