[c-nsp] Microsoft multicasted cluster vs. Cisco IOS

Tiffany Snyder tiffany.snyder at gmail.com
Sat Nov 5 17:18:30 EST 2005


We've been using bunch of Check Point on Nokia appliances for a few years
now and clustering works like a charm. Were you using Nokia's clustering
technology or Check Point's? We had a lot of problems with the latter and
went with the former.

On 11/4/05, David J. Hughes <bambi at hughes.com.au> wrote:
>
>
> On 05/11/2005, at 10:42 AM, David Sinn wrote:
>
> > RFC 1812 strictly precludes routers from accepting ARP's where the
> > returned MAC address is a multicast one:
>
> The clustering used by Checkpoint for HA Firewall 1 clusters used the
> "multicast mac / unicast IP" mechanism. Always a pain in the rear-end
> when there's a cisco in the middle. Looks like Checkpoint decided it
> was safer just to play by the book as they now use a totally different
> clustering mechanism that does not send back a dodgy arp response. As
> amazing as it may seem, Microsoft is implementing problems that the
> rest of the industry has already solved.
>
>
> David
> ...
>
> _______________________________________________
> cisco-nsp mailing list cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>


More information about the cisco-nsp mailing list