cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
1816
Views
0
Helpful
1
Replies

Checkpoint firewall HA on Nexus 7K

bill.greenwood
Level 1
Level 1

We have a customer wanting to connect a Checkpoint firewall in HA mode directly to the N7K. The problem is the HA traffic is not being passed. With Catalyst switches this could be resolved by configuring a static MAC address on each of the ports the Checkpoint is connected. It appears that static MAC entries can be configured, but will that work the same way as on the Catalyst Switches? (I think that it will, but I haven't had the time to research). Also is there another way to solve this on the Nexus?

The traffic is destined for MAC broadcast with the IP address of the firewall.

Sent from Cisco Technical Support iPad App

1 Reply 1

bill.greenwood
Level 1
Level 1

Actually it has been a long time since have done this. It is not possible to configure a static MAC address of ffff.ffff.ffff. You can't do this on Catalyst switches so it must be possible to change the checkpoint to send to a different MAC address, but I can't remember how.

Any ideas how be appreciated

Bill

Sent from Cisco Technical Support iPad App

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: