Hi,
I’ve faced this problem several times :
I have on my network Cyberguard firewall &
Cisco+Bay routers. When my server(web server
or VPN server) is replaced with a new box
which has exact configuration as the old server (ie same IP addr, disk, cpu etc), the
firewalls/routers can’t seem to ping nor make tcp connections to the newly replaced box. The only change I can think off is that
this new box has a different MAC addr as it is using a different NIC. I have to reboot
the firewalls/routers & then they will start talking again. Someone told me this has to do with the ARP cache in the routers/firewal.
As my Cyberguard firewall is a cluster (High
Avail config) pair, whenever I switch the firewall cluster to the standby partner, I would find the new active firewall could not
communicate with the routers/server too
till I rebooted the routers/server.
Can someone explain & elaborate on this, if
possible email the replies to
gohpo@pacific.net.sg
I’ve always thought IP address is all that is needed to identify a node on the network
& we don’t have to worry about ARP/MAC.
