- Products
- Learn
- Local User Groups
- Partners
- More
Maestro Masters
Round Table session with Maestro experts
Maestro and ElasticXL use, on their sync networks, a block of IPs reserved for documentation in RFC5737 (192.0.2.0/24, TEST-NET-1). RFC 6890 specifies that addresses in this block may not be used as the source or destination addresses of an IP datagram that transits two devices. To make our environment comply with the IP specifications, we obviously will need to change the sync network to use proper addresses.
I know I saw a process to change this, but my search-fu has failed me. Does anybody have that process handy?
I'm seeing references to changing 198.51.10x.0/24, but not that TEST-NET-1 addressing.
sk179028 - Connectivity issues in Security Group X with hosts in the network of 198.51.10x.0 / 24
Wow. Pretty sure that's the process I was thinking of, but the situation is so much worse than I remembered. My goodness. 198.51.10X for X!=0 is public! People own those addresses!
There is no supported process to change the sync addressing anymore as far as I know. Pretty sure the old chassis setup procedure gave you that option but no longer.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
7 | |
2 | |
2 | |
1 | |
1 | |
1 | |
1 | |
1 |
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY