Hi Julian,
It is possible to use the sync interfaces for the management network,
but you cannot have the sync\management interface be clustered. The sync
interface on all cluster members must not be clustered. I have done this
several times on NG AI R55.
Cheers
Liran Cohen
Julian Ramos wrote:
Hi Firewall list,
Does anybody know if it is possible to use a cluster interface as part
of the management network?
See my situation:
Two firewalls Checkpoint NG AI R55 that have the next networks:
1) 192.168.1.0/24 --> clustered network - outside
2) 192.168.2.0/24 ---> clustered network - dmz
3) 10.20.0.0/16 --> clustered network - internal
4) 172.16.0.0/24 --> sync network for clusterxl
The problem:
I have two clusters (two firewall each one) that both are managed from
the internal network (10.20.0.0/16). One seems to be working, but when
i tried to install the second cluster and install a new Management
Server, the cluster doesnt synchronize at all and the management
server can not install the policy.
When the internal network (10.20.0.0/16) is not clustered, the
clusterxl works and the management can install policy.
Also, if the network is clustered i can`t ping the sync interfaces
I understand that the virtual IP doesnt permit to ping the real IP
address, and maybe it stops the clustering, but i wonder if anybody
have a solution to this issue.
Remember i need to manage the cluster from the internal network
(clustered) where the management server is connected.
Best Regards,
-Julian
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
--------------------------------------------------------------------------
Test Your IDS
Is your IDS deployed correctly?
Find out quickly and easily by testing it with real-world attacks from
CORE IMPACT.
Go to http://www.securityfocus.com/sponsor/CoreSecurity_focus-ids_040708
to learn more.
--------------------------------------------------------------------------
