topic Re: ClusterXL none monitored interface in Firewall and Security Management

ClusterXL none monitored interface

Wolfgang — Mon, 02 Mar 2020 12:58:09 GMT

Hello CheckMates,

there was a possibility in R77.30 to define a ClusterXL interface as private none monitored.

This interface was then excluded from all availability tests of the cluster (sending CCP packets, ping to IPs in subnet etc.).

Under R80.xx this is gone only private is available and this interface will be monitored:

Any ideas how to create a none monitored interface under R80.xx ?

thanks

Wolfgang

Re: ClusterXL none monitored interface

PhoneBoy — Mon, 02 Mar 2020 18:37:31 GMT

Officially, you have to contact the TAC to get the solution, per:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk139252
Why it was removed from the UI, I’m not sure.

Re: ClusterXL none monitored interface

HeikoAnkenbrand — Mon, 02 Mar 2020 19:30:45 GMT

Hi @Wolfgang,

Maybe this will help.

If there are still unused interfaces on cluster members, they must be added to the$FWDIR/conf/discntd.if configuration file - refer to sk30060.

Re: ClusterXL none monitored interface

Wolfgang — Tue, 03 Mar 2020 06:47:12 GMT

Thanks @HeikoAnkenbrand , that's what I want. We had some problems with the attached switch fabric, but with a "disconnected" interface we can do some troubleshooting without initiating failover.

I'll check if this will be supported with the newer releases, sk article is a little bit old.

Wolfgang