topic R80.40 Active-Active Mode in ClusterXL in General Topics

R80.40 Active-Active Mode in ClusterXL

Nikolai_Borhart — Thu, 27 Feb 2020 16:02:05 GMT

Hello Community,

i'm interresting in ClusterXL Active-Active Mode.

I read the Limitaions for Active-Active Mode in R80.40 ClusterXL Guide.

I'm not sure if I understand this NAT limitation.

NAT on the IP addresses that belong to cluster interfaces is not supported
(because it does not survive cluster failover).

Is this mean, if I have the IP 192.168.0.1 on the Interface, I can't NAT on this IP for outgoing and incommint traffic ?

Thank

Nikolai

Re: R80.40 Active-Active Mode in ClusterXL

PhoneBoy — Fri, 28 Feb 2020 04:30:17 GMT

Yeah, you should not NAT to an IP address that is configured on a single cluster member.
You should be able to NAT to, say, the cluster IP (assuming hide NAT).

Re: R80.40 Active-Active Mode in ClusterXL

phlrnnr — Tue, 26 Jan 2021 19:01:00 GMT

In an R80.40 Active-Active cluster there is no "cluster" interface or virtual cluster IP address. I'm guessing in Active-Active mode, you would have to have some "other" NAT ranges outside of the cluster member IP addresses that would be able to route to either cluster member. Both FWs would advertise the NAT IP to their upstream routers. Because the NAT table and connections are synchronized, either FW in the cluster could process the return traffic.