topic Can Virtual switch with no uplinks can be used to propogate routes between two virtual-systems in Firewall and Security Management

Can Virtual switch with no uplinks can be used to propogate routes between two virtual-systems

an_technical — Mon, 03 Feb 2025 07:38:36 GMT

Hi All,

I want to propagate routes between two virtual systems. Both virtual systems have dedicated External virtual switches for ISP links. Suppose I create a new virtual switch called an inter-routing bw virtual system. The purpose of this switch will be to propagate routes between virtual systems, and there will not be any uplink to the switch. Is this design feasible?

Thanks

Re: Can Virtual switch with no uplinks can be used to propogate routes between two virtual-systems

Chris_Atkinson — Mon, 03 Feb 2025 09:57:05 GMT

Propagate routes by "tick box" option or by dynamic routing?

Virtual switches need a vlan on the network side. Remember if this is a cluster we also need to facilitate communication between cluster members in case the Virtual Systems are active in different nodes (this doesn't traverse the sync network).

https://youtu.be/TWg-xE6_uPk

Re: Can Virtual switch with no uplinks can be used to propogate routes between two virtual-systems

an_technical — Mon, 03 Feb 2025 10:42:20 GMT

Propagate routes by tick-box.

Firewalls are in active/standby mode.

Re: Can Virtual switch with no uplinks can be used to propogate routes between two virtual-systems

Chris_Atkinson — Mon, 03 Feb 2025 11:37:47 GMT

Per your previous thread this can be problematic with multiple vswitches in play.

https://community.checkpoint.com/t5/General-Topics/Route-Propagation-not-working-in-virtual-system/m-p/235763

Would recommend a diagram to help us understand the topology in more detail and suggest some options.