VIP configuration on a CSS (proxy arp issue?)
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-05-2008 03:38 PM
Hi,
I have a CSS11501S-K9 running version sg0810107s (08.10.1.07s) and am having problems with a VIP.
The setup is:
Checkpoint FW (192.168.96.126)
|
|
Cisco CSS
(192.168.96.124)
I want to use VIP's on the CSS in the range 172.16.1.0/24, but I don't actually want to assign the CSS or the firewall an IP in that range.
The checkpoint has a route to 172.16.1.0/24 via the IP address of the CSS (192.168.96.124)
Is this configuration supported? I know that the CSS has to do a proxy arp for the VIP to be active, but I thought this was automatic?
I can ping the VIP address 172.16.1.34 from the CSS.
Thanks in advance for your help.
Andrew
- Labels:
-
Application Networking
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
05-05-2008 11:24 PM
Oh dear, my content rule was listening on the wrong port :-/
Problem now solved (i.e there wasn't one in the first place!)
