topic Re: Building ElasticXL in R82 walk through (with videos) in Firewall and Security Management

Building ElasticXL in R82 walk through (with videos)

Tom_Kendrick — Wed, 13 Nov 2024 14:37:45 GMT

I have created a series of videos that talk through ElasticXL (and later rebuilt with VSNext).

In this group of videos, you will see:

1)Running the first time wizard and setting up ElasticXL

(view in My Videos)

2) Talk through of the webUI/CLI and some basic options

(view in My Videos)

3) Setup interfaces and VLANs, establish SIC

(view in My Videos)

4) Look at the new tool - Insights, and adding a new member

(view in My Videos)

5) Wrap up with 2 members and the show cluster command

(view in My Videos)

Re: Building ElasticXL in R82 walk through (with videos)

the_rock — Wed, 13 Nov 2024 15:30:06 GMT

Wow, thats extremelly helpful.

Andy

Re: Building ElasticXL in R82 walk through (with videos)

PhoneBoy — Wed, 13 Nov 2024 16:54:47 GMT

Nicely done!

Re: Building ElasticXL in R82 walk through (with videos)

Magnus-Holmberg — Fri, 15 Nov 2024 12:53:52 GMT

Nice videos 🙂

Could you add a network diagram on how this setup actually is.

So when am checking the documentation its refering to having the MGMT station be able to connect to the MAG interface, so very similar to VSX VS0.

However MAG interface dose not have a virtual IP.
In ClusterXL he drawings and education material was always to have the MGMT station and smartconsole machine behind the Gateway to protect it.

But when not having virtual IP on this MGMT VLAN to be used as default GW for the MGMT station,
what is check point recommended design when a customer have 1 cluster?

Regards,
Magnus

Re: Building ElasticXL in R82 walk through (with videos)

Paul_Grigg — Tue, 26 Nov 2024 05:30:43 GMT

The admin guide also contains a video on ElasticXL

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ScalablePlatforms_AdminGuide/Content/Topics-SPG/ElasticXL/Working-with-ElasticXL.htm

Re: Building ElasticXL in R82 walk through (with videos)

Tom_Kendrick — Tue, 26 Nov 2024 13:00:27 GMT

Hi Magnus, in this setup it's in an isolated lab, so Mgmt is on the same subnet as the MAGG, and Breaking Point connected to the data interfaces.

In the lab prod gw, the Mgmt MAGG does have a VIP (think like Maestro Mgmt), and I didnt want to change the MDS (as it's used for other things), so I added a different IP/subnet to the Mgmt IP on the new EXL hardware migrating to it.

The GW object was changed to use the EXL MAGG "VIP" (IP) as the object IP - of course updated interfaces/vlans/bonds too, and I am just routing through the EXL group on one VLAN, to get to the MAGG interface on the other side and back again. Alternatively I could have used a VRF/SVI, but seems OK so far.

I was able to swap over to EXL fine, and added an additional member too.

Tom