Re: [FW1] Site not visible when HACMP is on

[Bill McCabe <dfb2000@mediaone.net>]

I have some experience with both FW-1 and HACMP, so maybe I can help.
Typically, an HACMP node in a cluster will have two adapters and three IP
addresses assigned (and possibly locally administered addresses different
from the hardware MAC address). The three IP addresses are conventionally
called 'boot', 'service' and 'standby'. When the node is powered on (but
before HACMP is started) the primary adapter will be configured to use the
'boot' address and the backup will use the standby IP address. When HACMP
is brought up, the primary interface will be reconfigured to use the
'service' IP address. The standby interface must be on the same physical
network as the service adapter, but on a different logical network, so that
in the event of an primary adapter failure the standby can be reconfigured
with the service IP address (and optionally the primary adapter's MAC
address). Judging by your description below, I'd guess that they have given
you the boot address of the primary adapter which is active before HACMP
comes up. Make sure that you're NATing to the service address of the
primary adapter, and it should work just fine (presuming they haven't
bungled the configuration of the cluster, and that there aren't any
intermediate network configuration issues which are preventing service
adapter packets from reaching the firewall). If that is not the problem,
then I'll need more information then you've given me.

Bill


At 2:29 PM +0100 3/20/00, Joseph Favia Jr. wrote:
>Hi,
>
>I've got a situation where an IBM AIX cluster system is not visible when
>HACMP is turned on. When HACMP is turned off all works well; the site can
>be accessed by both the actual IP address and via a NATted IP address. Can
>HACMP cause such problems? I know very little about AIX/HACMP and
>management of the web site is not my job; I just want to make sure it's not
>FW1 causing the problem, as many people are suggesting/implying....
>
>Thanks for your help
>
>Joe
>
>
>===============================================================================
>=
>     To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
>===============================================================================
>=





================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================