High availability firewall/VPN with VRRP

• Autores: Dave Zwieback
• Localización: ;login:: the magazine of USENIX & SAGE, ISSN 1044-6397, Vol. 26, Nº. 8, 2001, págs. 41-46
• Idioma: inglés
• Texto completo no disponible (Saber más ...)
• Resumen

  • Internet connectivity has become mission-critical for many organizations, especially as they shift their connections to customers and partners from private lines to virtual private networks (VPNs). Not surprisingly, the availability requirements for Firewalls and VPNs have substantially increased. In this article, I discuss the implementation of a high availability (HA) Firewall/VPN using the Virtual Router Redundancy Protocol Monitored Circuit (VRRPmc). Specifically, I cover Check Point Firewall-1/VPN-1 version 4.1 SP3 running on appliances made by Nokia, with IPSO version 3.3. However, since most network equipment manufacturers currently support VRRP version 2 (RFC 2338) and VRRPmc, the general concepts discussed here apply to almost any HA network configuration.