VIP configuration on a CSS (proxy arp issue?)

Unanswered Question
May 5th, 2008

Hi,

I have a CSS11501S-K9 running version sg0810107s (08.10.1.07s) and am having problems with a VIP.

The setup is:

Checkpoint FW (192.168.96.126)

|

|

Cisco CSS

(192.168.96.124)

I want to use VIP's on the CSS in the range 172.16.1.0/24, but I don't actually want to assign the CSS or the firewall an IP in that range.

The checkpoint has a route to 172.16.1.0/24 via the IP address of the CSS (192.168.96.124)

Is this configuration supported? I know that the CSS has to do a proxy arp for the VIP to be active, but I thought this was automatic?

I can ping the VIP address 172.16.1.34 from the CSS.

Thanks in advance for your help.

Andrew

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Loading.
andrew-kearton Mon, 05/05/2008 - 23:24

Oh dear, my content rule was listening on the wrong port :-/

Problem now solved (i.e there wasn't one in the first place!)

Actions

This Discussion