Vlan is the only "supported" method for adding additional IP's to interfaces. If that is what you mean by alias. You can get by in some cases by just adding an additional regular IP to an interface, I have several I do this with on test machines but...I have seen where an alias was added for an external interface on IPSO r55, all seemed fine until the box was rebooted, the FW decided to start sourcing traffic out with the newly added IP rather than the original one. VPN's and other outbound traffic dependant on the original IP failed miserably. The quick fix was to remove it or vlan tag it. If you are running vrrp you can add additional VIP's, you have to do this on xbeams cos if you want to do proxy arp in a vrrp config, but this is not pretty either.
-GS -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of sin Sent: Friday, March 03, 2006 10:23 AM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] IP alias Erestor Elensar wrote: > Hi, > > Whats the best way to create a IP alias on a IPSO ? in the proxy arp configuration page. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
