Hi, if you want to upgrade your IPSO to 3.8.1 take care when you change the VRRP configuration... that stuff doesn't work! I've already tried it and I've got 1000 funny error messages like "delete the per interface configuration before use the simple mode configuration" and so on. The problem is: there is no simple mode configuration anymore... The way how to change the VRRP configuration is to install the firewall from scratch (delete the configuration, reboot the box and reconfigure it).
So, have fun! Best regards, Radu -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Donnerstag, 26. Mai 2005 04:07 To: [email protected] Subject: [FW-1] VRIDs when using simplified VRRP We currently define a VRID for each physical interface on our Nokia appliance. This is true if there is only one network connected to the interface or if there are many VLANs connected. We are in the process of upgrading to IPSO 3.8.1 page 285 of IPSO 3.8.1 Voyager Reference Guide states: Note: All configured backup addresses must be associated with the same VRID. If you do not associate all backup addresses with the same VRID when you configure monitored circuit mode using simplified configuration, monitoring of VRRP network interfaces is not enabled. Does this mean you can only have 1 VRID or can we continue to have one for each physical interface. The Reference Guide continues with references of choosing the particular VRID for options and changes etc. which contradicts the Note above. I originally interpreted the note to be in reference to a HA solution where the master, and all backup appliances must use the same VRID for a particular backup address. I just thought I'd run it past this mail list to be sure before we upgrade. Thanks in advance, Ken __________________________________________________________________ Switch to Netscape Internet Service. As low as $9.95 a month -- Sign up today at http://isp.netscape.com/register Netscape. Just the Net You Need. New! Netscape Toolbar for Internet Explorer Search from anywhere on the Web and block those annoying pop-ups. Download now at http://channels.netscape.com/ns/search/install.jsp ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
