This is probably a simple one so apologies in advance. I have a Check Point 5800 HA cluster in a Data Centre and following some work on a Cisco Nexus, looked at the ARP table and saw the following for my firewalls:
Internet 18.104.22.168 0 001c.7f81.0908 ARPA GigabitEthernet0/0/0 (CP VRRP) Internet 22.214.171.124 0 001c.7f81.13a8 ARPA GigabitEthernet0/0/0 (CP 1 interface) Internet 126.96.36.199 0 001c.7f81.0908 ARPA GigabitEthernet0/0/0 (CP 2 interface)
Can someone tell me why CP2 MAC address is the same as CP VRRP? I was thinking that CP2 is acting as the master but would appreciate if this could be confirmed.
Using the interface MAC for the cluster IP has the disadvantage that the ARP entry on all devices using this cluster IP as gateway has to be updated in case of a failover. Although the Check Point floods gratuitous ARP from the active node to update the tables on all connected devices, we have seen this not working on some older devices. These loose connectivity for routed traffic until they update their ARP table several minutes later.
(Newer) Check Point supports VMAC as a "shared" cluster MAC. This VMAC is moved to the active node IF similar as in HSRP or VRRP.
Have you ever wondered why pluggable optics exist? Have you ever wondered what acronyms like QSFP, LR4, FEC, and PAM4 actually mean? In this episode I continue my conversation with my colleague Ray Nering. He explains to me how a lot of these came to be, ...
Community Live- Smart Licensing Using Policy (Routing) – A Simplified Licensing Approach
(Live event - Tuesday, 18 May, 2021 at 9:00 am Pacific/ 1:00 pm Eastern / 7:00 pm Paris)
This event will have place on Tuesday 18th, May 2021 at 9:00 hrs PDT&nb...
Today I'm going to write SD-WAN Overview & Advanced Deployment Lab Part ||* check out SD-WAN Overview & Advanced Deployment Lab Part | through this link : https://community.cisco.com/t5/networking-documents/sd-wan-overview-amp-advan...
Have you ever wondered why pluggable optics exist? Have you ever wondered what acronyms like QSFP, LR4, FEC, and PAM4 actually mean? In this first episode I start a conversation with my colleague Ray Nering. He explains to me how a lot of these came to be...
Support Talks video- How to determine a legitimate hardware issue
(Live event - Thursday 13 May, 2020 at 9:30 am Pacific/ 12:30 pm Eastern / 6:30 pm Paris)
This event had place on Thursday 13th, May 13 at 9:30hrs PST
This event helps you to ...