CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


First, I hope you're all well and staying safe.
Second, I want to give a "heads up" that you should see more activity here shortly, and maybe a few cosmetic changes.
I'll post more details to the "Announcements" forum soon, so be on the lookout. -E

 

Results 1 to 4 of 4

Thread: Proxy ARP wirh ClusterXL VMAC

  1. #1
    Join Date
    2009-08-22
    Posts
    19
    Rep Power
    0

    Default Proxy ARP wirh ClusterXL VMAC

    Hi,
    We have a cluster of GAIA R77.30 gateways in clusterXL HA new mode. We'd like to use the virtual MAC (VMAC) with clusterXL to fix some issues. However we have proxy ARP for manual NAT configured on the gateways, and we are not sure about how we must configure the proxy ARP entries on the GAIA gateways.
    Currently we have :
    IP address -> NAT IP address
    Interface/MAC -> external interface
    real IP Address --> physical IP address of the external interface

    Should we modify this when enabling the VMAC, to :
    IP address -> NAT IP address
    Interface/MAC -> VMAC of the external interface ??
    real IP Address --> physical IP address of the external interface

  2. #2
    Join Date
    2013-09-25
    Location
    Bucharest
    Posts
    649
    Rep Power
    8

    Default Re: Proxy ARP wirh ClusterXL VMAC

    Are you going to migrate from Nokia/IPSO to Gaia?

  3. #3
    Join Date
    2009-08-22
    Posts
    19
    Rep Power
    0

    Default Re: Proxy ARP wirh ClusterXL VMAC

    We have a cluster of GAIA R77.30 gateways in clusterXL HA new mode.
    No, it's already a GAIA cluster. But we'd like to use the VMAC feature.

  4. #4
    Join Date
    2007-06-04
    Posts
    3,314
    Rep Power
    18

    Default Re: Proxy ARP wirh ClusterXL VMAC

    Correct you will need to use the VMAC as opposed to the actual physical MAC of the Interface if using VMAC mode.

Similar Threads

  1. VMAC feature on R75.20 freezes OS
    By poopa in forum Firewall Blade
    Replies: 5
    Last Post: 2013-05-10, 15:46
  2. VMAC mode issue - Duplication of SYN packets
    By Kishin Fatnani in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 0
    Last Post: 2011-10-28, 08:52
  3. UTM ClusterXL VIP/Proxy ARP
    By avilT in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 4
    Last Post: 2009-01-22, 19:59
  4. VMAC in Nokia VRRP Cluster
    By avilT in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 2
    Last Post: 2008-10-15, 19:39
  5. Request to proxy other than next proxy resource http://proxy.foo.com
    By roadrunner in forum Content Security/Security Servers/CVP/UFP
    Replies: 0
    Last Post: 2005-08-14, 12:23

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •