topic Re: Sync Redundancy Ports in Firewall and Security Management

Sync Redundancy Ports

Phianne_C133188 — Wed, 06 Aug 2025 08:58:58 GMT

Hi,

We have two Check Point Quantum Force 9700 Plus appliances that we would like to implement high availability for with ClusterXL. We would like to have sync redundancy but this model only has 1 dedicated sync port. Could I check if it is possible to implement sync redundancy using bonded interfaces where 1 port is the sync port, and the other port is a regular 1G RJ-45 port, or do both ports need to be the same 1G RJ-45 ports?

Thanks!

Re: Sync Redundancy Ports

_Val_ — Thu, 07 Aug 2025 09:24:30 GMT

Only one Sync interface is supported, so you cannot run sync on two independent interfaces. However, you can define a bond interface and then use it as a sync, thus providing sync redundancy.

Re: Sync Redundancy Ports

Bob_Zimmerman — Thu, 07 Aug 2025 13:41:07 GMT

The interface named Sync has a funny name, but it isn't special in any other way. Same for the interface named Mgmt. They can be members of a bond, just like any other interface, and they're in the same routing table as all the other interfaces. I actually have a cluster which has sync on a bond of two other interfaces, and it uses both the interface named Sync and the interface named Mgmt for traffic the cluster is passing (long, dumb story).

Re: Sync Redundancy Ports

Chris_Atkinson — Fri, 08 Aug 2025 02:34:09 GMT

Shouldn't be an issue.

Refer also: sk92804: Sync Redundancy in ClusterXL