IPSO Clustering problem

Hi all,
I have two IP380s with IPSO 4.1 and NGX HFA03 configured in
an IP cluster
with forwarding mode and static assignment.
after I configured all of the interfaces, I started to see
IP spoofing from
the upstream internet router address, and also TCP out of
state first packet
not SYN errors when trying to access the cluster's external
IP address from
the internet, any ideas? I was able to ping it earlier this
morning.

Many thanks,

- Yang

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

OK, I talked to Nokia, they told me to delete the cluster
object and all of
the gatewat objects and recreate the cluster with all of the
interfaces on
the gateways configured. Because I added another 4
interfaces to the cluster
node through voyerge first then the cluster object after
initially creating
the cluster object with 4 interfaces. This apparently solved
the problem,
but this makes adding/configure new interfaces on the
gateways a extremely
painful process. Anybody has a better idea?

Thanks,
- Yang

On 7/27/06, Yang Xiao <yxiao2004gmail.com> wrote:
>
> Hi all,
> I have two IP380s with IPSO 4.1 and NGX HFA03
configured in an IP cluster
> with forwarding mode and static assignment.
> after I configured all of the interfaces, I started to
see IP spoofing
> from the upstream internet router address, and also TCP
out of state first
> packet not SYN errors when trying to access the
cluster's external IP
> address from the internet, any ideas? I was able to
ping it earlier this
> morning.
>
> Many thanks,
>
> - Yang
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================