| Network Description | Dual redundant Nokia firewalls (running Check Point VPN-1) with VRRP failover |
| Author | Dave Westwood |
| Details | The spreadsheet linked below is designed to aid in
the deployment of Nokia IPSO 3.X firewalls running VRRP monitored circuits.
Loosely based on the course materials for the Nokia Security Administration
course, it helps to plan just how the monitored circuits will be addressed,
what priorities will be attached to each firewall, what delta will be used
to trigger failover, and what authentication will be used for the VRRP
multicasts between the firewalls.
The diagram shows a simplifed version of the scenario the worksheet was designed for, with a pair of Nokia IP440 firewalls acting as the gateway between multiple subnets (only two are included in the diagram for clarity). Users of the worksheet will see that dummy addresses for the firewalls, neighbouring gateways, and VRRP backup IPs have already been included. |
| Deployment Worksheet | Excel 2000 spreadsheet: VRRP Worksheet |