Query on Configuring interface to be not monitored in cluster but part of cluster.

bookman — Tue, 17 Aug 2021 15:16:35 GMT

Hi Team ,

Would like to know if we remove the Monitored interface from the cluster and make it has Private does it loose the VIP and the interface doesn't participate in the cluster anymore ?

Setup details :

Checkpoint R80.20 in Cluster setup.

CCP mode: Manual (Unicast)
Required interfaces: 6
Required secured interfaces: 1

Interface Name: Status:
eth1-01.XXX UP

Security GW: Lowest and highest VLANs are monitored per interface.

Updated

-------------------------

Like Cisco ASA (#no monitor-interface commands) we can disable monitoring from cluster.

But if we configure the Checkpoint with the network type private we cannot assign virtual IP address

Also If we configure interface as Private, can we enable RIP/DHCP without issue and what would be the gateway for downstream device if device get failover ?

Also confirm are we going to lose VIP if we select network type as Private.

If interface is part of cluster and we do not want to monitor that interface, like Cisco ASA is possible and there might have option in checkpoint as well.

Appreciate any response on the above query.

Thanks in advance.

Re: Query on Configuring interface to be not monitored in cluster but part of cluster.

Chris_Atkinson — Sat, 07 Aug 2021 14:21:36 GMT

Dynamic routing is currently not supported on cluster member private interfaces per sk116815.

topic Query on Configuring interface to be not monitored in cluster but part of cluster. in Firewall and Security Management

Query on Configuring interface to be not monitored in cluster but part of cluster.

Re: Query on Configuring interface to be not monitored in cluster but part of cluster.