topic Re: Load Sharing and DHCP Server ? in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23369#M1798 <HTML><HEAD></HEAD><BODY><P>Disabling the DHCP server from the Load Sharing cluster and putting a dedicated DHCP server into place solved our issue.</P></BODY></HTML> Thu, 30 Aug 2018 14:11:06 GMT Danny 2018-08-30T14:11:06Z Load Sharing and DHCP Server ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23364#M1793 <HTML><HEAD></HEAD><BODY><P>We are maintaining more and more end users with 3-node clusters in load sharing mode. One R80.10 end user has activated the DHCP Server on his three clusternodes and therefore receives dhcp duplicates on his systems caused by all three clusternodes actively responding to dhcp requests.</P><P></P><P><A href="http://supportcontent.checkpoint.com/solutions?id=sk101539"><STRONG>ClusterXL Load Sharing mode limitations and important notes</STRONG></A> does not mention any existing limitation for DHCP Server.</P><P></P><P>The end user could send DHCP requests to the physical IP address of one of his three clusternodes only, but this would mean a loss of redundancy for his DHCP functionality.</P><P></P><P>WHat would you suggest?</P></BODY></HTML> Thu, 30 Aug 2018 07:36:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23364#M1793 Danny 2018-08-30T07:36:12Z Re: Load Sharing and DHCP Server ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23365#M1794 <HTML><HEAD></HEAD><BODY><P><A href="https://community.checkpoint.com/migrated-users/41735">Danny Jung</A>‌, why LS? Just curious.&nbsp;</P></BODY></HTML> Thu, 30 Aug 2018 07:49:10 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23365#M1794 _Val_ 2018-08-30T07:49:10Z Re: Load Sharing and DHCP Server ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23366#M1795 <HTML><HEAD></HEAD><BODY><DIV class=""><UL><LI>To share the load. When HA with only one active member isn't capable of handling the entire traffic load then load sharing is one of the options you get, when you have more than two clusternodes available.</LI><LI>To actively use the investment of three clusternodes and not having two enterprise appliances staying idle in standby mode the entire day.</LI><LI>and more</LI></UL></DIV></BODY></HTML> Thu, 30 Aug 2018 07:58:35 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23366#M1795 Danny 2018-08-30T07:58:35Z Re: Load Sharing and DHCP Server ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23367#M1796 <HTML><HEAD></HEAD><BODY><P>For DHCP Relay, thre is&nbsp;#3 from <A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk97566&amp;partition=Advanced&amp;product=Security#Related%20solutions">sk97566 Certain subnets and hosts behind NAT cannot obtain or renew IP addresses over DHCP in R77</A>:</P><UL><LI><A>Explanation for issue with DHCP and Manual NAT in ClusterXL Load Sharing mode</A><BR /><DIV><BLOCKQUOTE class="jive-quote"><UL><LI>DHCP traffic is not configured to be synchronized between cluster members.</LI><LI>Stick Decision Function (SDF) is disabled.</LI></UL></BLOCKQUOTE></DIV></LI></UL><P></P><P></P><P>But a DHCP Server in LS would need to share IP&nbsp;address information...</P></BODY></HTML> Thu, 30 Aug 2018 08:03:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23367#M1796 G_W_Albrecht 2018-08-30T08:03:03Z Re: Load Sharing and DHCP Server ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23368#M1797 <HTML><HEAD></HEAD><BODY><P>I have to comment on two first bullet points,</P><P></P><P>In my humble opinion, in practice LS CP clustering on physical nodes brings mode bottlenecks if compared with HA option. In case you have bought 3 cluster members and want to use them all together, the only sensible option is to go for VSLS implementation with 3 or more VSs.&nbsp;</P></BODY></HTML> Thu, 30 Aug 2018 14:03:13 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23368#M1797 _Val_ 2018-08-30T14:03:13Z Re: Load Sharing and DHCP Server ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23369#M1798 <HTML><HEAD></HEAD><BODY><P>Disabling the DHCP server from the Load Sharing cluster and putting a dedicated DHCP server into place solved our issue.</P></BODY></HTML> Thu, 30 Aug 2018 14:11:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23369#M1798 Danny 2018-08-30T14:11:06Z Re: Load Sharing and DHCP Server ? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23370#M1799 <HTML><HEAD></HEAD><BODY><P>How does Cloning Group behave on this scenario? Anyone who has tried?</P><P></P><P>Regards.</P></BODY></HTML> Thu, 30 Aug 2018 16:31:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Load-Sharing-and-DHCP-Server/m-p/23370#M1799 KennyManrique 2018-08-30T16:31:15Z