Gaia VRRP setup guide - Revision history

Nighthawk: /* Proxy arps */

2016-02-18T01:59:22Z

‎Proxy arps

2013-09-15T10:04:19Z

‎create VRID and backup-addresses

2013-09-15T09:24:48Z

‎Checking your configuration

2013-09-15T09:13:10Z

‎Failover

2013-09-15T09:12:02Z

2013-09-15T09:06:22Z

‎create VRID and backup-addresses

2013-09-15T09:04:23Z

‎create VRID and backup-addresses

2013-09-15T08:47:50Z

‎Checking your configuration

2013-09-15T08:47:32Z

‎Checking your configuration

2013-09-15T08:47:05Z

‎Checking your configuration

@@ Line 45: / Line 45: @@
 == Proxy arps ==
-If you have NATs with associated proxy arps, then you will need to adjust this to match the new VRRP  configuration.  VRRP by default uses a multicast MAC.  Most likely, if you are upgrading from SPLAT and CPHA, your proxy arps were using unicast MACs.
+If you have NATs with associated proxy arps, then you will need to adjust(is switching over from CPHA) the config to match the new VRRP MACs.
 The VMAC will be 00:00:5e:00:01:xx, where xx = the hexadecimal form of you VRID.  So, in this example our VRID is 100, so the VMAC is 00:00:5e:00:01:64.  You can view this by running...
@@ Line 51: / Line 51: @@
   [Expert@chkpfw1]# '''clish -c "show vrrp interfaces" | grep -i vmac'''
              VMAC Mode:                VRRP                 VMAC:                     00:00:5e:00:01:64
              VMAC Mode:                VRRP                 VMAC:                     00:00:5e:00:01:64
-−
 == Checking your configuration ==

@@ Line 11: / Line 11: @@
   Expert@chkpfw1]# '''clish'''
   chkpfw2> '''add mcvr vrid 100 priority 100 priority-delta 10'''
-  chkpfw2> '''add mcvr vrid 100 backup-address 172.16.31.1'''
+  chkpfw2> '''add mcvr vrid 100 backup-address 172.16.31.11'''
   chkpfw2> '''add mcvr vrid 100 backup-address 192.168.175.1'''
   chkpfw2> '''save config'''
@@ Line 17: / Line 17: @@
   Expert@chkpfw2]# '''clish'''
   chkpfw2> '''add mcvr vrid 100 priority 95 priority-delta 10'''
-  chkpfw2> '''add mcvr vrid 100 backup-address 172.16.31.1'''
+  chkpfw2> '''add mcvr vrid 100 backup-address 172.16.31.11'''
   chkpfw2> '''add mcvr vrid 100 backup-address 192.168.175.1'''
   chkpfw2> '''save config'''

@@ Line 83: / Line 83: @@
-Verify your vrrp backup address is in effect.  It will NOT show up in ifconfig output.  Also, you cannot ping the backup-addresses in Gaia like you could in ipso.
+Verify your vrrp backup address is in effect.  It will NOT show up in ifconfig output.
   Expert@chkpfw1]# '''ip addr show eth0'''
@@ Line 90: / Line 90: @@
      inet 172.16.31.9/28 brd 172.16.31.15 scope global eth0
      inet 172.16.31.11/28 brd 172.16.31.15 scope global secondary flags 10 eth0   <<< this line is the vrrp backup-address
 == Failover ==

@@ Line 99: / Line 99: @@
   chkpfw2> set mcvr vrid 100 priority 105
 [[category:vrrp]]
 [[category:gaia]]

← Older revision		Revision as of 09:12, 15 September 2013
Line 92:		Line 92:


		+	== Failover ==
		+
		+	To control which firewall is master, adjust the priorities. In the beginning we set chkpfw1 priority to 100, and chkpfw2 to 95. If we elevate the priority of the latter, it will become master.
		+
		+	Example:
		+
		+	chkpfw2> set mcvr vrid 100 priority 105

	[[category:vrrp]]		[[category:vrrp]]
	[[category:gaia]]		[[category:gaia]]

@@ Line 42: / Line 42: @@
 == Checking your configuration ==
 {| cellspacing="5" border="1"
 |-
+|

@@ Line 41: / Line 41: @@
 == Checking your configuration ==
-{| cellspacing="5" border="1"
+{| cellspacing="5" border="1" align="left"
-! align="left"
+|
+!