topic Re: Can Checkpoint Cluster have different interfaces for 1 network on both members ? in General Topics https://community.checkpoint.com/t5/General-Topics/Can-Checkpoint-Cluster-have-different-interfaces-for-1-network/m-p/9204#M1169 <HTML><HEAD></HEAD><BODY><P>Always try to avoid things like this, it is a troubleshooting nightmare. From a Bond interface perspective it will work, but again you really do not want to go this way and tell the designers this is not supported.</P><P>In R80.10 you can no longer add interface names per gateway in the cluster network configuration and it even does not seem to check the interface names anymore in cluster environments.</P></BODY></HTML> Wed, 18 Jul 2018 09:21:01 GMT Maarten_Sjouw 2018-07-18T09:21:01Z Can Checkpoint Cluster have different interfaces for 1 network on both members ? https://community.checkpoint.com/t5/General-Topics/Can-Checkpoint-Cluster-have-different-interfaces-for-1-network/m-p/9202#M1167 <HTML><HEAD></HEAD><BODY><P>Hi,</P><P>I have an existing cluster running fine. Now I need to add a new network in it and for that my design team choosing Eth7 on FW-A and Eth8 on FW-B.</P><P>Can we get a cluster&nbsp;interface for these 2 different interface under 1 network ?</P><P>Can we have a bond interface bond3 (<STRONG>Eth7, Eth8</STRONG>) on FW-A and bond3 (<STRONG>Eth5, Eth8</STRONG>) on FW-B ?</P><P>Can we build a cluster with bond interface (<STRONG>bond3</STRONG>) on FW-A and Ethernet interface on FW-B (<STRONG>Eth8</STRONG>) ?</P></BODY></HTML> Mon, 16 Jul 2018 10:01:35 GMT https://community.checkpoint.com/t5/General-Topics/Can-Checkpoint-Cluster-have-different-interfaces-for-1-network/m-p/9202#M1167 Sunil_Panwar 2018-07-16T10:01:35Z Re: Can Checkpoint Cluster have different interfaces for 1 network on both members ? https://community.checkpoint.com/t5/General-Topics/Can-Checkpoint-Cluster-have-different-interfaces-for-1-network/m-p/9203#M1168 <HTML><HEAD></HEAD><BODY><P>It's generally considered best practice to have the same configuration on both systems.</P><P>This is noted in the <A href="https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/media-type/html?action=portlets.DCFileAction&amp;eventSubmit_doGetdcdetails=&amp;fileid=25321">ClusterXL ATRG</A> as something that can cause unexpected failovers:</P><BLOCKQUOTE class="jive_macro_quote jive-quote jive_text_macro"><P>In addition, in order to avoid unexpected fail-overs due to issues with CCP packets on cluster interfaces, it is strongly recommended to pair only identical physical interfaces as cluster interfaces - even when connecting the cluster members via a switch:</P><P>• Intel 82598EB on Member_A with Intel 82598EB on Member_B<BR />• Broadcom NeXtreme on Member_A with Broadcom NeXtreme on Member_B</P></BLOCKQUOTE></BODY></HTML> Mon, 16 Jul 2018 13:58:03 GMT https://community.checkpoint.com/t5/General-Topics/Can-Checkpoint-Cluster-have-different-interfaces-for-1-network/m-p/9203#M1168 PhoneBoy 2018-07-16T13:58:03Z Re: Can Checkpoint Cluster have different interfaces for 1 network on both members ? https://community.checkpoint.com/t5/General-Topics/Can-Checkpoint-Cluster-have-different-interfaces-for-1-network/m-p/9204#M1169 <HTML><HEAD></HEAD><BODY><P>Always try to avoid things like this, it is a troubleshooting nightmare. From a Bond interface perspective it will work, but again you really do not want to go this way and tell the designers this is not supported.</P><P>In R80.10 you can no longer add interface names per gateway in the cluster network configuration and it even does not seem to check the interface names anymore in cluster environments.</P></BODY></HTML> Wed, 18 Jul 2018 09:21:01 GMT https://community.checkpoint.com/t5/General-Topics/Can-Checkpoint-Cluster-have-different-interfaces-for-1-network/m-p/9204#M1169 Maarten_Sjouw 2018-07-18T09:21:01Z