topic Re: Cluster xl with bgp multihome in Firewall and Security Management

Cluster xl with bgp multihome

rizo — Mon, 20 Dec 2021 21:17:21 GMT

Hi ,

Supposed I have 2 gateways active passive cluster , and need to connect 2 different isp with bgp having my own as

How can I keep my external ip reachable from all interfaces ? (Loobback) reachable from both interfaces ?

What is best practice to implement this scenario

Thank you

Re: Cluster xl with bgp multihome

Chris_Atkinson — Tue, 21 Dec 2021 00:00:18 GMT

If the external IP is the VIP is it part of a /24 network or similar that you have control over?

Otherwise the use of Loopbacks with Dynamic Routing in ClusterXL environments needs version R81.10

Things like grace-full restart are recommend here along with the appropriate routing policy to advertise routes to both ISPs.

Refer also: sk103047 | sk95967 | sk100499

If the ISP were the same the configuration would vary some per:

https://community.checkpoint.com/t5/Security-Gateways/AS-Path-prepending-to-two-different-peers-in-the-same-AS/m-p/132851

Re: Cluster xl with bgp multihome

rizo — Tue, 21 Dec 2021 05:59:49 GMT

Hi Chris !

Yes the ip of the vip is my real ip but still the vip is on port 1 on both machines , I ask can I create vip with my external address so it can be reached from all interfaces ?

Like a loopback vip or something?