topic Re: Cluster Members IP Address in Firewall and Security Management

Cluster Members IP Address

ela-in-sg-2017 — Tue, 14 Jun 2022 06:33:15 GMT

Hi,

Why does CP clustering need to have IP address for member 1 and member 2? What's the use of it? Comparing with PA firewall they only need 1 which is VIP.

Re: Cluster Members IP Address

_Val_ — Tue, 14 Jun 2022 06:47:38 GMT

You can use private non-routable IPs for members and a routable VIP.

Re: Cluster Members IP Address

PhoneBoy — Thu, 16 Jun 2022 23:59:21 GMT

How else would you connect to a specific gateway member in the cluster for troubleshooting and the like?
It’s also needed for pushing policy, among other things.

Re: Cluster Members IP Address

Bob_Zimmerman — Fri, 17 Jun 2022 14:05:46 GMT

It lets the members talk to each other on all of their interfaces. By default, they run a heartbeat protocol on the highest and lowest subinterfaces of every physical interface, as well as on all physical interfaces which have IP addresses. This allows the clustering mechanism to spot failures in complicated network topologies and use the member which has the best connectivity.