https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197125#M36780 <P>We've done it for years!&nbsp; However, need to ensure that you account for distance and delay, as an example we have a 4 node VSX cluster spread across two DCs roughly 15-20 miles apart, now the underlining infrastructure design is key to any multi-site deployment.</P> Sun, 05 Nov 2023 12:09:08 GMT genisis__ 2023-11-05T12:09:08Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197117#M36776 <P><BR />Hello, Mates</P> <P>Currently we have 1SMS+1ClusterXLHA, in the same DC (Main Office).</P> <P>By management's disposition, 1 of the Cluster members, has to move to another DataCenter (DC) (In another location).</P> <P>Are there any considerations to be taken into account in these scenarios?</P> <P><EM>Is it possible for the Cluster to work with the 2 members in different locations?</EM></P> <P><EM>By moving one of the Cluster members to another physical location, can the Cluster be "reassembled" keeping its Management IPs? Or will all this have to be "restructured"?</EM></P> <P>Thank you for your kind opinions.</P> <P>Regards.</P> Sun, 05 Nov 2023 06:58:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197117#M36776 Matlu 2023-11-05T06:58:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197119#M36777 <P>Yes - Entirely depends on the composition of the new data centre network and ability to extend Layer-2 / VLANs to preserve the current topology.</P> Sun, 05 Nov 2023 10:48:13 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197119#M36777 Chris_Atkinson 2023-11-05T10:48:13Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197123#M36779 <P>Totally possible, lots of people have that scenario. What Chris said is accurate.</P> Sun, 05 Nov 2023 11:39:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197123#M36779 the_rock 2023-11-05T11:39:06Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197125#M36780 <P>We've done it for years!&nbsp; However, need to ensure that you account for distance and delay, as an example we have a 4 node VSX cluster spread across two DCs roughly 15-20 miles apart, now the underlining infrastructure design is key to any multi-site deployment.</P> Sun, 05 Nov 2023 12:09:08 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197125#M36780 genisis__ 2023-11-05T12:09:08Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197130#M36782 <P>Hello,</P> <P>So this kind of scenario is possible, but I understand that it depends a lot on working <STRONG>"hand in hand"</STRONG> with the Networking team, correct?</P> <P>Because I would understand that this Firewall equipment that is moved to a new DC, should be connected to a <EM><STRONG>SwitchCore/Router</STRONG></EM>, which allows the <STRONG>"connectivity"</STRONG> to the site where the device is not being moved.</P> <P>Is my interpretation correct?</P> <P>Thank you.</P> Sun, 05 Nov 2023 20:11:52 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197130#M36782 Matlu 2023-11-05T20:11:52Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197132#M36784 <P>Indeed the cluster members should have connectivity between their interfaces, the same as they do today (@ Layer-2).</P> <P>Requirements for latency &amp; packet loss are detailed in the ClusterXL admin guide.</P> <P>There are other cluster types available but this is the most common.</P> Sun, 05 Nov 2023 22:11:00 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197132#M36784 Chris_Atkinson 2023-11-05T22:11:00Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197134#M36786 <P>Yes bro. Just follow what Chris suggested.</P> <P>Best regards.</P> <P>Andy</P> <P>&nbsp;</P> Sun, 05 Nov 2023 22:58:42 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Migration-of-1-member-of-ClusterXL-HA/m-p/197134#M36786 the_rock 2023-11-05T22:58:42Z