https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86910#M6694 Yes, those will have different mgmt IP, but all other interface will be exact duplicate (both phsical IP and Virtual IP) Mon, 01 Jun 2020 07:52:13 GMT Fung_To_Puk 2020-06-01T07:52:13Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86908#M6692 <P>Is it ok to have multiple Gateway/Cluster with same IP address and topology?</P><P>e.g. gateway A at Production site had mgmt 192.168.0.1/24, eth1(internal) 192.168.1.1/24, eth2(external) 192.168.2.1/24</P><P>gateway B at DR site had mgmt 192.168.0.2/24, eth1(internal) 192.168.1.1/24, eth2(external) 192.168.2.1/24</P> Mon, 01 Jun 2020 07:24:27 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86908#M6692 Fung_To_Puk 2020-06-01T07:24:27Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86909#M6693 <P>It's advisable that at least the Management IPs be different unless it's a true _cold_ standby with everything seperate/isolated.</P> Mon, 01 Jun 2020 07:47:10 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86909#M6693 Chris_Atkinson 2020-06-01T07:47:10Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86910#M6694 Yes, those will have different mgmt IP, but all other interface will be exact duplicate (both phsical IP and Virtual IP) Mon, 01 Jun 2020 07:52:13 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86910#M6694 Fung_To_Puk 2020-06-01T07:52:13Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86913#M6695 <P>How are they isolated from one another?</P> <P>Different VLANs / VRFs would be recommended to avoid conflicts if the infrastructure isn't physically separated.</P> Mon, 01 Jun 2020 08:13:37 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86913#M6695 Chris_Atkinson 2020-06-01T08:13:37Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86915#M6696 They are at different site, as the DR site is exact duplicate of the production site, everything is the same, except the mgmt network Mon, 01 Jun 2020 08:35:16 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Mutiple-Cluster-with-same-IP-address/m-p/86915#M6696 Fung_To_Puk 2020-06-01T08:35:16Z