List Info

Thread: SPLAT HA Cluster Question




SPLAT HA Cluster Question
user name
2006-02-22 07:07:14
Tom,

If it hasn't come up before you should approach your ISP
about setting up
your routers with HSRP, or whatever their preferred active
standby
configuration is (since you already have two routers).  This
way you may get
a brief blip as the virtual fails, but it doesn't require
that your firewall
cluster actually fails over and makes the process more
seamless in case of
an unexpected failure.

Tim

-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM]
On Behalf Of Tom Brown
Sent: Saturday, February 11, 2006 2:57 PM
To: FW-1-MAILINGLISTAMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] SPLAT HA Cluster Question

AI R55 on SPLAT in 2 module cluster

Our HA cluster is connected to our ISP via 2 seperate
routers that they 
run. Our IP range is generally routed down from their
primary router to 
our primary cluster member (we run master/slave config) and
if our 
primary module fails our secondary will take over and the IP
range will 
in turn be routed down from the secondary router by the ISP
- This works 
as we have experienced a primary module lockup.

I have reveived notification from our ISP that they are
doing some work 
on our primary router overnight and service to this router
will be lost. 
In theory we will be OK as the secondary router will be
online and the 
IP's routed from it by our ISP however will our HA cluster
'notice' the 
primary router failure and fail traffic over onto our slave
firewall 
module? Should be have done anything/need to do anything to
make sure we 
don't loose service diring this outage?

thanks

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERVamadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-ownerts.checkpoint.com
=================================================
[1]

about | contact  Other archives ( Real Estate discussion Medical topics )