Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
950
Views
0
Helpful
1
Replies

VIP configuration on a CSS (proxy arp issue?)

andrew-kearton
Level 1
Level 1

‎05-05-2008 03:38 PM

Hi,

I have a CSS11501S-K9 running version sg0810107s (08.10.1.07s) and am having problems with a VIP.

The setup is:

Checkpoint FW (192.168.96.126)

|

|

Cisco CSS

(192.168.96.124)

I want to use VIP's on the CSS in the range 172.16.1.0/24, but I don't actually want to assign the CSS or the firewall an IP in that range.

The checkpoint has a route to 172.16.1.0/24 via the IP address of the CSS (192.168.96.124)

Is this configuration supported? I know that the CSS has to do a proxy arp for the VIP to be active, but I thought this was automatic?

I can ping the VIP address 172.16.1.34 from the CSS.

Thanks in advance for your help.

Andrew

Labels:
0 Helpful
1 Reply 1

andrew-kearton
Level 1
Level 1

‎05-05-2008 11:24 PM

Oh dear, my content rule was listening on the wrong port :-/

Problem now solved (i.e there wasn't one in the first place!)

0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents