topic Re: Change Cluster mode in Firewall and Security Management

Change Cluster mode

Andy_N — Fri, 27 Dec 2019 07:54:38 GMT

Hello

Does anybody know – is it possible to change Cluster operation mode from HA to Load Sharing mode without downtime?

Are there any additional steps required besides changing mode on configuration page?

Regards

Re: Change Cluster mode

Jeff_Gao — Fri, 27 Dec 2019 11:21:43 GMT

I think it is better for a downtime,All guesses are unreliable of this operation.

Re: Change Cluster mode

Andy_N — Fri, 27 Dec 2019 12:28:31 GMT

Jeff_Gao, did you do that operation?

Re: Change Cluster mode

Wolfgang — Fri, 27 Dec 2019 14:13:33 GMT

Andrey,

it is not possible to change the mode without downtime,

Sync between the members is lost and is started newly again. Before you change the cluster mode you have to decide which mode do you want to run. Multicast ore unicast ?

You have to check with your switch capabilities which mode you should use. Unicast is almost the mode with which most of the switch vendors has no problems. With multicast you're switches and routers attached to the cluster should support these.

Wolfgang

Re: Change Cluster mode

PhoneBoy — Fri, 27 Dec 2019 17:46:26 GMT

What version are you currently running?
For R80.20 and R80.30, this is only supported with the most recent jumbo and enabling support for it.
See: https://community.checkpoint.com/t5/General-Topics/Is-CP-planning-to-support-Load-Sharing-in-future-releases/m-p/35384#M7467

In either case, if you’re using Load Sharing with VPN, this is not currently supported past R80.10.

Re: Change Cluster mode

Andy_N — Sat, 28 Dec 2019 05:24:01 GMT

PhoneBoy

Thanks for answer.

We're using R80.20 with latest jumbo. Think there are no problems to change Cluster mode witch having lates jumbo

Re: Change Cluster mode

Andy_N — Sat, 28 Dec 2019 05:28:39 GMT

Re: Change Cluster mode

Wolfgang — Sat, 28 Dec 2019 09:45:11 GMT

Normally this should be changed quick.

Last time I did in my lab environment I had to reboot both nodes. And again be aware of the multi- or unicast mode, this ist the most to observing part.

Wolfgang