Hi,
I have a CSS11501S-K9 running version sg0810107s (08.10.1.07s) and am having problems with a VIP.
The setup is:
Checkpoint FW (192.168.96.126)
|
|
Cisco CSS
(192.168.96.124)
I want to use VIP's on the CSS in the range 172.16.1.0/24, but I don't actually want to assign the CSS or the firewall an IP in that range.
The checkpoint has a route to 172.16.1.0/24 via the IP address of the CSS (192.168.96.124)
Is this configuration supported? I know that the CSS has to do a proxy arp for the VIP to be active, but I thought this was automatic?
I can ping the VIP address 172.16.1.34 from the CSS.
Thanks in advance for your help.
Andrew
