Re: [FW1] Proxy ARP and Stonebeat

[Michele Lucini <mike@tilink.ch>]

On 04-May-99 Lance Spitzner wrote:
> 
> That is the beauty of Stonebeat, when the primary fails, the secondary
> assumes
> its identity, including the same MAC addresses.  The only IP/MACs that remain
> unique are the Stonebeat NICs used to admin the systems.  So, you should have
> no
> proxy ARP problems, since both will be using the same MACs.

Well, you have this problem if you are doing static NATting without defining
any special route on the router before the firewall.

In this case, you need to modify the online scripts of stonebeat. Btw, I
noticed that in the last release of SB there some new scripts that are executed
(something like postonline.sh, etc..). So, you may want to edit these new
scripts.

Bye!!

--
Michele Lucini  <mike@tilink.ch>
Phone: +41-76-3736060


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================