Which platform are you on? If IPSO then yes, remove all the additional vrrp addresses and add manual proxy arps for these. If you are running COS then this is the method it uses for manual proxy arps.
-GS ________________________________ From: Peter Addy <wavema...@yahoo.com> To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Sent: Wed, October 27, 2010 3:53:38 PM Subject: [FW-1] Please help !! ARP using VRRP Hi, Please help asap Does anyone know why there would be any good reason to create vrrp addreses and then assign these to the physical interfaces, rather than using manual proxy arp entries?. I have a configuration where there are no manaul proxy arp entries, but there is vrrp addreses which are the actual object addresses which are in the nat policy on the firewall, these are the addresses that are on the physical interfaces finally is it safe to simply move all these and simply add manual arp entries, surely this is best practice to remove and add manual nat and not to have proxy addresses assigned to the interfaces with virtual routers etc Thanks ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to lists...@amadeus.us.checkpoint.com in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email fw-1-ow...@ts.checkpoint.com =================================================
