topic Re: Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster? in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4117#M41 <HTML><HEAD></HEAD><BODY><P>The&nbsp;<A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk32073&amp;partition=Advanced&amp;product=ClusterXL%22">Configuring Cluster Addresses on Different Subnets</A>&nbsp;SK is how you would achieve what you are after.</P><P>More specifically, your Cluster IP&nbsp;would be the publicly routable IP you have.</P><P>You would also have a private (non-routable) subnet for the external interfaces--this is required for ClusterXL.</P></BODY></HTML> Mon, 17 Jul 2017 18:18:35 GMT PhoneBoy 2017-07-17T18:18:35Z Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4114#M38 <HTML><HEAD></HEAD><BODY><P>My appliance is directly connected to the internet with a public IP address, that's why I think is my only option. Is there a workarround to set up Full HA with an /30 network for my external interface? Thanks in advance.</P></BODY></HTML> Mon, 17 Jul 2017 14:14:13 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4114#M38 Cesar_Caballero 2017-07-17T14:14:13Z Re: Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4115#M39 <HTML><HEAD></HEAD><BODY><P>This is not a Full HA specific question, refer to the following SK:&nbsp;<A class="link-titled" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk32073&amp;partition=Advanced&amp;product=ClusterXL%22" title="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk32073&amp;partition=Advanced&amp;product=ClusterXL%22">Configuring Cluster Addresses on Different Subnets</A>&nbsp;</P><P>That said, I would consider carefully whether you want to use a Full HA cluster or not.</P><P>You may wish to read through some of the SKs linked here:&nbsp;<A class="link-titled" href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk60443&amp;partition=General&amp;product=ClusterXL," title="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk60443&amp;partition=General&amp;product=ClusterXL,">How to install Full HA cluster on Check Point appliances</A>&nbsp;</P></BODY></HTML> Mon, 17 Jul 2017 16:17:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4115#M39 PhoneBoy 2017-07-17T16:17:02Z Re: Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4116#M40 <HTML><HEAD></HEAD><BODY><P>Thanks Dameon for your reply, but I've allready read both SK and neither of them answer my question. The thing is that I want both my appliances to be in a cluster and act as my border router, we don't have a router to use as a border gateway. Here's a pic to understand better:</P><P><IMG alt="Network description" class="image-1 jive-image j-img-original" src="https://community.checkpoint.com/legacyfs/online/checkpoint/57369_Red.PNG" style="height: auto;" /></P><P>Is it possible?</P></BODY></HTML> Mon, 17 Jul 2017 18:10:04 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4116#M40 Cesar_Caballero 2017-07-17T18:10:04Z Re: Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster? https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4117#M41 <HTML><HEAD></HEAD><BODY><P>The&nbsp;<A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;solutionid=sk32073&amp;partition=Advanced&amp;product=ClusterXL%22">Configuring Cluster Addresses on Different Subnets</A>&nbsp;SK is how you would achieve what you are after.</P><P>More specifically, your Cluster IP&nbsp;would be the publicly routable IP you have.</P><P>You would also have a private (non-routable) subnet for the external interfaces--this is required for ClusterXL.</P></BODY></HTML> Mon, 17 Jul 2017 18:18:35 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Is-there-a-way-to-configure-a-Standalone-machine-Security/m-p/4117#M41 PhoneBoy 2017-07-17T18:18:35Z