CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 4 of 4

Thread: Proxy ARP wirh ClusterXL VMAC

  1. #1
    Join Date
    2009-08-22
    Posts
    19
    Rep Power
    0

    Default Proxy ARP wirh ClusterXL VMAC

    Hi,
    We have a cluster of GAIA R77.30 gateways in clusterXL HA new mode. We'd like to use the virtual MAC (VMAC) with clusterXL to fix some issues. However we have proxy ARP for manual NAT configured on the gateways, and we are not sure about how we must configure the proxy ARP entries on the GAIA gateways.
    Currently we have :
    IP address -> NAT IP address
    Interface/MAC -> external interface
    real IP Address --> physical IP address of the external interface

    Should we modify this when enabling the VMAC, to :
    IP address -> NAT IP address
    Interface/MAC -> VMAC of the external interface ??
    real IP Address --> physical IP address of the external interface

  2. #2
    Join Date
    2013-09-25
    Location
    Bucharest
    Posts
    649
    Rep Power
    7

    Default Re: Proxy ARP wirh ClusterXL VMAC

    Are you going to migrate from Nokia/IPSO to Gaia?

  3. #3
    Join Date
    2009-08-22
    Posts
    19
    Rep Power
    0

    Default Re: Proxy ARP wirh ClusterXL VMAC

    We have a cluster of GAIA R77.30 gateways in clusterXL HA new mode.
    No, it's already a GAIA cluster. But we'd like to use the VMAC feature.

  4. #4
    Join Date
    2007-06-04
    Posts
    3,306
    Rep Power
    17

    Default Re: Proxy ARP wirh ClusterXL VMAC

    Correct you will need to use the VMAC as opposed to the actual physical MAC of the Interface if using VMAC mode.

Similar Threads

  1. VMAC feature on R75.20 freezes OS
    By poopa in forum Firewall Blade
    Replies: 5
    Last Post: 2013-05-10, 15:46
  2. VMAC mode issue - Duplication of SYN packets
    By Kishin Fatnani in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 0
    Last Post: 2011-10-28, 08:52
  3. UTM ClusterXL VIP/Proxy ARP
    By avilT in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 4
    Last Post: 2009-01-22, 19:59
  4. VMAC in Nokia VRRP Cluster
    By avilT in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 2
    Last Post: 2008-10-15, 19:39
  5. Request to proxy other than next proxy resource http://proxy.foo.com
    By roadrunner in forum Content Security/Security Servers/CVP/UFP
    Replies: 0
    Last Post: 2005-08-14, 12:23

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •