I'd suggest that you get Suns and a more scalable HA product, such as,
oh, I don't know, Rainwall :-)
Nokia's VRRP solution bears some very close resemblances to the HSRP
protocol that it's descended from. It's a master/slave relationship which
requires that one box be passively listening for the other box to fail. In
order to use both boxes one must configure two VRRP processes so that each
box is master of something. The solution does not scale past two nodes, it
cannot dynamically allocate traffic (so no load-balancing, only
load-sharing), and it relies on Check Point's own TCP state-table
synchronization to solve session breakage caused by asymmetric routing.
On a side note, the layer 4 switches (such as F5, Alteon, Radware) have
some very intelligent & dynamic traffic management features when looked at
by themselves but they all rely on VRRP for fault-tolerance between
themselves and all fall prey to these problems.
I hope this helps, feel free to ask for more details.
Jack Coates, Rainfinity SE
t: 650-962-5301 m: 650-280-4376
On Thu, 6 Jul 2000, John Loshbough wrote:
>
> I am currently running our Firewall (version 4.0) on a Solaris 2.6 box and am
>looking to upgrade the hardware and software. Shortly after the hardware is upgraded
>I'll have budget to add a high availability option.
>
> One of our people went to a Nokia sales presentation and said that we don't need to
>purchase the Checkpoint or other vendors high availability product because high
>availability comes with a Nokia box.
>
> Could someone knowledgeable about these issues help with the pros and cons of
>switching from Solaris to a Nokia box. Also I'd appreciate some comments about
>Nokia's (free) high availability vers Checkpoint's.
>
>
>
> ================================================================================
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ================================================================================
>
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
