topic Re: CheckPoint80.40 Load Sharing Option Not Working From Smart Console in Firewall and Security Management

CheckPoint80.40 Load Sharing Option Not Working From Smart Console

RajnishR — Wed, 04 Aug 2021 07:07:15 GMT

Hi Experts,

I am deploying checkpoint 80.40 in load sharing mode in my lab using smart Console but even I am not selecting IPSec VPN and have applied the remedy provided in (https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk162637)

I am unable to select load sharing option in the ClusterXL configuration and getting same error every time.

Below steps taken to fix it but no success:

1. Upgraded the security management server to Jumbo Hotfix Accumulator Take 118

2. Applied sk162637 (i.e. kernel parameter, variable set in Windows & variable addition in $FWDIR/scripts/cpm.sh

Appreciate your response.

Regards,

Rajnish

PhoneBoy — Wed, 04 Aug 2021 07:48:48 GMT

Due to a major architectural change, ClusterXL Load Sharing does not support VPN in R80.20, R80.30, and R80.40.
The steps in sk162637 allow you to enable ClusterXL Load Sharing without VPN support.
You will need to upgrade to R81 JHF 34 and above or R81.10.
See: https://supportcenter.checkpoint.com/supportcenter/portal?action=portlets.SearchResultMainAction&eventSubmit_doGoviewsolutiondetails=&solutionid=sk171421

RajnishR — Wed, 04 Aug 2021 07:59:23 GMT

Thanks for the response,

I don't need VPN and thus disabled that option but still getting error as shared.

followed the steps of sk162637 but getting immediate prompt which is quite surprising for me even.

Do you recommend, R81 JHF 34 and above or R81.10 even if the sk162637 does not work?

Thanks.

_Val_ — Wed, 04 Aug 2021 14:45:18 GMT

Then un-check VPN blade from the cluster object.

RajnishR — Wed, 04 Aug 2021 15:31:44 GMT

Hi,

Could you please elaborate more on your recommendation?

I unchecked the VPN option already while creating the cluster. Do you mean uncheck on cluster member and if yes how?

And is it possible with current R80.40 version itself?