topic Re: Change the VSX Sync subnet to add 3rd member in Firewall and Security Management

Change the VSX Sync subnet to add 3rd member

Marco32 — Fri, 29 Mar 2024 08:18:31 GMT

Hi there,

I have a VSX Cluster with 2 members connected directly with a cable for Sync interface using a /30 subnet.

To support a migration I need to add a 3rd member to avoid issue.

To do this, I need to connect the sync trought a switch and need to change the Sync subnet from /30 to /29 so I can have 3 available IP. There's a command for VSX to do this? This operation can generate issue to the service (I'll plan to clusterXL_admin down one node to avoid split brain)?

Members are R81.10 JHF130

Thanks

Re: Change the VSX Sync subnet to add 3rd member

Chris_Atkinson — Fri, 29 Mar 2024 08:41:26 GMT

As I recall the sync mask change is basically following this procedure without actually changing the interface:

https://support.checkpoint.com/results/sk/sk36977

Re: Change the VSX Sync subnet to add 3rd member

Marco32 — Fri, 29 Mar 2024 17:36:00 GMT

Hi Chris,

I followed you SK and it works. Maybe I have some issue during vs move from one member to another in my lab with 3 node. After moving I have the active vs on the node I want but other member have VS in down, or lost, someone in standby. it's not so good.