Nokia Network Voyager, Reference Manual

Page: 385 / 700

Voyager Reference Guide 387
!
If an internal cluster IP address will participate in a VPN, add only that
cluster IP address. In this case you should also set the attribute
use_limited_flushnack
in the objects file for IP clustering to true.
! If you want to support VPN tunnels, configure the tunnels using the same
configuration information that you entered on the Clustering Setup
Configuration page in Voyager.
! Configure firewall synchronization to occur on a dedicated network used
only for this purpose (avoid using a production network for firewall
synchronization). Do not use either of the cluster protocol networks for
firewall synchronization traffic.
Note
The firewall synchronization network should have bandwidth of at
least 100 mbps.
!
If you are using VPN-1/FireWall-1 FP3 and are also using NAT:
! Disable the automatic ARP option on the NAT tab in Global Properties
in Check Point’s SmartDashboard management application.
!
Using Cluster Voyager, create a proxy ARP entry for the internal and
external cluster interfaces. To do this, follow the procedure in
“Creating Proxy ARP Entries for NAT.”