Hi Does anyone have an idea on the below
I do have master/backup interfaces if i use iclid sh vrrp there is one interface which always appears to be in master when it should be in backup, this is an interface which has two networks assigned to it, but is ok on the master and show in master, there is two backup addresses to this interface, also should cphaprob stat show active/active or active/backup. in VRRP i can't recall finally an issue we have had is that all works ok, however when we change the VRID to 3 from 1on both firewalls , then a problem ocurrs, so we then change the VRID back to 1 and all works fine, so i'm thinking is this the firewall or switches or even the load balancers we have? Thanks --- On Sun, 13/12/09, Gary Scott <[email protected]> wrote: From: Gary Scott <[email protected]> Subject: Re: [FW-1] Nokia VRRP and Cphaprob To: [email protected] Date: Sunday, 13 December, 2009, 0:26 Since vrrp is IPSO configured use iclid and show vrrp or the vrrp monitoring pages in voyager to see the HA status. If you are sure your vrrp config is correct, do a cpstop and see if your intefaces show proper master/backup, vrrp does not need CP to run properly, if so may be a policy problem, if not then a switch/config problem? ________________________________ From: Hugo van der Kooij <[email protected]> To: [email protected] Sent: Sat, December 12, 2009 4:03:12 PM Subject: Re: [FW-1] Nokia VRRP and Cphaprob On 12/12/09 20:38, Peter Addy wrote: > does anyone know why my firewalls would say active active in a vrrp > configured set up > cluster XL is not checked on the cluster firewall object and we are not using > IP clustering on the IPSO >From a Check Point perspective it is an active, active setup. Hugo. Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= Scanned by Check Point Total Security Gateway. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
