RE: [fw1-gurus] AI - VRRP Configuration

[Shawn Behrens <Shawn.Behrens@xxxxxxxxxxxxxx>]

> I can create the VRRP configuration but don't know how to 
> create the FW rules for the VRRP.

Didn't we have this thread just a week ago or so? :o)

Define your cluster object. ClusterXL unchecked. 3rd-party VRRP, Sticky and
both NAT options in 3rd party unchecked. Define member topology, set all
interfaces that are VRRPed to "Clustered". Make sure sync interface is NOT
defined as clustered! Define sync network to use. Define cluster object
topology with the corresponding VRRP addresses. Set Anti-Spoofing if you
wish to. Then create this rule:

cluster-object	VRRP-multicast-address		IGMP		accept
			cluster-object			VRRP

Shawn


Please note that:
 
1. This e-mail may constitute privileged information. If you are not the intended recipient, you have received this confidential email and any attachments transmitted with it in error and you must not disclose, copy, circulate or in any other way use or rely on this information.
2. E-mails to and from the company are monitored for operational reasons and in accordance with lawful business practices.
3. The contents of this email are those of the individual and do not necessarily represent the views of the company.
4. The company does not conclude contracts by email and all negotiations are subject to contract.
5. The company accepts no responsibility once an e-mail and any attachments is sent.

http://www.integralis.com


---------------------------------------------------------------------
FireWall-1 Gurus Mailing List (http://www.phoneboy.com/gurus)
To unsubscribe, mailto:fw1-gurus-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, mailto:fw1-gurus-help@xxxxxxxxxxxxxxxxxx