Tom,
If it hasn't come up before you should approach your ISP
about setting up
your routers with HSRP, or whatever their preferred active
standby
configuration is (since you already have two routers). This
way you may get
a brief blip as the virtual fails, but it doesn't require
that your firewall
cluster actually fails over and makes the process more
seamless in case of
an unexpected failure.
Tim
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AMADEUS.US.CHECKPOINT.COM]
On Behalf Of Tom Brown
Sent: Saturday, February 11, 2006 2:57 PM
To: FW-1-MAILINGLIST AMADEUS.US.CHECKPOINT.COM
Subject: [FW-1] SPLAT HA Cluster Question
AI R55 on SPLAT in 2 module cluster
Our HA cluster is connected to our ISP via 2 seperate
routers that they
run. Our IP range is generally routed down from their
primary router to
our primary cluster member (we run master/slave config) and
if our
primary module fails our secondary will take over and the IP
range will
in turn be routed down from the secondary router by the ISP
- This works
as we have experienced a primary module lockup.
I have reveived notification from our ISP that they are
doing some work
on our primary router overnight and service to this router
will be lost.
In theory we will be OK as the secondary router will be
online and the
IP's routed from it by our ISP however will our HA cluster
'notice' the
primary router failure and fail traffic over onto our slave
firewall
module? Should be have done anything/need to do anything to
make sure we
don't loose service diring this outage?
thanks
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner ts.checkpoint.com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http:
//www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner ts.checkpoint.com
=================================================
|