Sounds like you have both FW's defined with the external IP's. Either define them with their internal or set a host route on the manager directing it through the internal interface of the secondary when trying to get to the secondary's external interface. I'm also assuming the manager is internal to this cluster pair.
-GS -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Mick Reay Sent: Friday, January 18, 2008 3:32 AM To: [email protected] Subject: [FW-1] Anit-spoofing message I have 2 Nokia 380s set up in a VRRP cluster. I can ping the external intreface of the backup Nokia but when I try to test sic I am unable to and get anti-spoofing messages. Anyone seen this before? Thanks. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
