Hi All, Has anyone set up two Nokia IP650s with VRRP for high availability? I'm a bit confused as to how to set it up the best way. I presumed it is set up by assigning a single, shared external IP (1 default external gateway, assigning a single, shared internal IP (1 default internal gateway) and a unique ip on each fw so that the management station can administer each box. You can then configure Synchronization on the fws to keep rules and objects up to date. But, after looking at an official Nokia IP650 support doc, it recommended the following VRRP scenario: The primary fw and secondary fw have unique external and internal IPs. Should the primary fw die, the secondary will assume the ip of the primary fw. You could also have a scenario where both fws backup each other and network objects and all traffic is split equally between them. This method surely creates additional administration and configuration overhead. So, does anyone have a recommended approach to setting up VRRP between two fw 4.1s SP3, and do you recommend combining this with Check Point High Availabilty module with Synchronization?? Thank you kindly, Gabriel _________________________________________________________________________ Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com. ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
