topic Re: R82 VSNext cluster with multiple VS in Firewall and Security Management

R82 VSNext cluster with multiple VS

TINTIN8 — Tue, 25 Feb 2025 09:41:37 GMT

Can someone please provide instructions on setting up a VSNext cluster with multiple FW and VSs?

I couldn't find any supporting document for the above.

Re: R82 VSNext cluster with multiple VS

Chris_Atkinson — Tue, 25 Feb 2025 10:22:24 GMT

These videos might be helpful for you:

https://community.checkpoint.com/t5/Security-Gateways/Building-VSNext-in-R82-walk-through-with-videos/m-p/232604?search-action-id=114412270789&search-result-uid=232604

Re: R82 VSNext cluster with multiple VS

G_W_Albrecht — Tue, 25 Feb 2025 10:28:40 GMT

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_Installation_and_Upgrade_Guide/Content/Topics-IUG/Installing-VNext.htm

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_VSX_AdminGuide/Content/Topics-VSXG/VSNext.htm

Re: R82 VSNext cluster with multiple VS

TINTIN8 — Wed, 26 Feb 2025 03:26:09 GMT

This was most helpful!!! Thanks a lot!!!
However Im doing a lab on GNS3 with R82, before migrating our 5400 VSX cluster to 9300 VSNext cluster. In the lab, I can never get the sync interfaces to talk to each other. The first FW cannot see the second FW at all. Could be a problem only for GNS3?
I tried directly connecting eth1 interfaces, and also via a switch, but still no luck. 😞

Any suggestion will be highly appreciated.

Re: R82 VSNext cluster with multiple VS

josi — Thu, 27 Feb 2025 08:18:31 GMT

Configuring R82 cluster on VMs/open servers can be a little bit tricky because of virtual links and port mapping - by default eth0 is Mgmt port and eth1 Sync port...

Check state and IP of both sync ports and try to ping each other.. or try to restart the service manually

https://community.checkpoint.com/t5/Security-Gateways/R82-elasticXL-lab/m-p/219343

Re: R82 VSNext cluster with multiple VS

Chris_Atkinson — Wed, 26 Feb 2025 13:38:03 GMT

ElasticXL / VSNext is not supported on such a configuration (GNS3), please refer sk181128

Re: R82 VSNext cluster with multiple VS

genisis__ — Sun, 22 Jun 2025 13:48:37 GMT

Chris - not sure if you can help.
I'm running a single node elasticXL/VSNext node (for now) in proxmox. I've had a few strange issues.

- Internal error when connecting to GUI (seems work from a Guest VM, but does not work from Host which is weird).

- Node crashed after attempting to delete a VS (I've raised a TAC case for this as its produced crash files).

One thing I wanted to try and figure out is how to actual re-sic a virtual-gateway, either in GUI or CLI as there does not appear to be a way of doing thing, clearly when creating the VS in CLI or GUI you have can provided the 'one-time-password', but does not seem to be any command to just re-sic.
I've built this with JHFA25 as well.