[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewall-1
Subject:    Re: [FW-1] splat cluster and radius admin auth
From:       pkc mls <pkc_mls () YAHOO ! FR>
Date:       2012-03-24 7:08:48
Message-ID: 4F6D7300.4040807 () yahoo ! fr
[Download RAW message or body]

Le 20/03/2012 05:36, pkc mls a écrit :
> Hi all,
>
For the archives.
The solution is to disable the hide behind cluster IP (you have to 
disablecluster xl first in the cluster properties, then the option is is 
the "3rd party config").
other opion is to add the radius port in the table.def as defined in 
secureknowledge.

> I try to configure radius auth for my splat admins on an r75.30 cluster.
>
> I systematically receive access-reject errors. (the sameconfig on my 
> smartcenters that don't run cluster xl works fine,
> radius servers are the same).
>
> When I have a look at the radius traces, the radius is sent with the 
> cluster member IP address, but
> uses the virtual IP in the radius client address.
>
> Is this a normal behaviour ?
>
> thanks.
>
>
>
> Scanned by Check Point Total Security Gateway.
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV@amadeus.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>


Scanned by Check Point Total Security Gateway.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV@amadeus.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================

Scanned by Check Point Total Security Gateway.
[prev in list] [next in list] [prev in thread] [next in thread]