https://community.checkpoint.com/t5/Firewall-and-Security-Management/Configure-OSPF-in-ECMP-Environment/m-p/109378#M14899 <P>Hello Checkmates,</P><P>I have an issue working out how to configure OSPF in my environment. I have a ClusterXL pair of 6500 Gateways E80.40. I want to connect them to a pair of backbone switches which use OSPF to route between them and to the rest of the network using ECMP paths from each Backbone. From what I can tell OSPF routing in a ClusterXL environment is dependent on the VIP of the interfaces. However, each interface in my environment would sit in a different subnet, one subnet for each interface that connects to each backbone. It is unclear whether such an environment is supported, or how I go about configuring the interfaces and VIP. Any ideas?</P> Sun, 31 Jan 2021 13:10:00 GMT Aaron_Zelechow 2021-01-31T13:10:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Configure-OSPF-in-ECMP-Environment/m-p/109378#M14899 <P>Hello Checkmates,</P><P>I have an issue working out how to configure OSPF in my environment. I have a ClusterXL pair of 6500 Gateways E80.40. I want to connect them to a pair of backbone switches which use OSPF to route between them and to the rest of the network using ECMP paths from each Backbone. From what I can tell OSPF routing in a ClusterXL environment is dependent on the VIP of the interfaces. However, each interface in my environment would sit in a different subnet, one subnet for each interface that connects to each backbone. It is unclear whether such an environment is supported, or how I go about configuring the interfaces and VIP. Any ideas?</P> Sun, 31 Jan 2021 13:10:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Configure-OSPF-in-ECMP-Environment/m-p/109378#M14899 Aaron_Zelechow 2021-01-31T13:10:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Configure-OSPF-in-ECMP-Environment/m-p/109983#M15060 <P>If you cannot mesh the interfaces using bonds you can explore the following option using Cluster XL:</P> <P><A href="https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ClusterXL_AdminGuide/Topics-CXLG/Active-Active-Mode.htm" target="_blank" rel="noopener">https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ClusterXL_AdminGuide/Topics-CXLG/Active-Active-Mode.htm</A></P> <P>Alternately the firewalls could be deployed not in a clustered arrangement but you would need to manage the risk of asynchronous traffic / lack of state syncronization / fail over via routing.</P> Sat, 06 Feb 2021 11:54:32 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Configure-OSPF-in-ECMP-Environment/m-p/109983#M15060 Chris_Atkinson 2021-02-06T11:54:32Z