VPN3k & Checkpoint FW "cluster"

Discussion in 'Cisco' started by Bill Thompson, Jul 11, 2004.

  1. Hello All,

    Does anyone have experience with LAN-to-LAN connections bettween a VPN3005
    and a "cluster" of Checkpoint FWs?

    One of my trading parters has changed their Checkpoint gateway into what
    he calls a cluster. He is not running VRRP, but some type of load sharing
    configuration. What this means to the VPN3k is that it is connecting to
    address a.a.a.a and receiving responses from address a.a.a.b. As you can
    imagine, the VPN3k is ignoring the secondary address since the tunnel was
    not established to that address. I have looked at setting up multiple
    gateways on the VPN3k, but that can only be done with a one-way connection
    and this needs to be bi-directional.

    I was hoping to get some opinions on this "cluster" idea he is
    using. To my mind a VPN gateway that receives at one address and responds
    on another is broken, but the partner insists that this is done with
    Checkpoint devices all of time. Opinions and/or suggestions would be
    appreciated.

    --
    Bill Thompson
    Bill Thompson, Jul 11, 2004
    #1
    1. Advertising

Want to reply to this thread or ask your own question?

It takes just 2 minutes to sign up (and it's free!). Just click the sign up button to choose a username and then you can ask your own questions on the forum.
Similar Threads
  1. Matthew Melbourne

    EzVPN IOS Client with VPN3k - Tunnel Drops

    Matthew Melbourne, Apr 28, 2004, in forum: Cisco
    Replies:
    0
    Views:
    623
    Matthew Melbourne
    Apr 28, 2004
  2. Eric Sorenson

    VPN3K: Client Type Limiting via RADIUS

    Eric Sorenson, Jan 10, 2005, in forum: Cisco
    Replies:
    0
    Views:
    490
    Eric Sorenson
    Jan 10, 2005
  3. Todd Adamson

    Checkpoint HA Cluster w/ multicast

    Todd Adamson, Apr 4, 2005, in forum: Cisco
    Replies:
    3
    Views:
    7,708
    Ivan Ostres
    Apr 5, 2005
  4. robbanwh
    Replies:
    1
    Views:
    378
  5. ahpook

    VPN3K IMAPS proxy

    ahpook, Jun 16, 2006, in forum: Cisco
    Replies:
    0
    Views:
    573
    ahpook
    Jun 16, 2006
Loading...

Share This Page