CheckPoint NG Rules to Allow VRRP

{LANG_NAVORIGIN} Firewall CheckPoint
Mitchell Rowton 02/21/2004





Step 1

Create objects for all of the physical and logical IP addresses on both firewalls.

Example

PriNSPint3 - 10.0.0.3 SecNSPint3 - 10.0.0.2 VirNSPint3 - 10.0.0.1 Do this for every interface

Step 2

Create a VRRP multicast object.

Example

mcast.net-224.0.0.18 - 224.0.0.18 Step 3

Create a simple group that contains all of the objects in Step 1.

Step 4

Create a rule with the source as the simple group in step 3 and the destination of the same simple group plus the object created in step 2. Permit the VRRP service between these.

Example

Source
FW_Interface_Group

Destination
FW_Interface_Group
mcast.net-224.0.0.18

Action
Accept

Service
VRRP
IGMP














Your IP address will be sent with this e-mail

From e-mail to e-mail