topic Re: VRRP cluster and SC control connections in General Topics

VRRP cluster and SC control connections

SergeyMkn — Wed, 14 Dec 2022 10:57:44 GMT

Hi,

In each version of CP (I cheked started with R80.40) when SC installed inside the VRRP cluster and NATed by that VRRP cluster(with nat control connection checked) the other outside gateways send logs to SC's private address. Where is a problem? But policy installed to that gateways successfully.

Re: VRRP cluster and SC control connections

_Val_ — Wed, 14 Dec 2022 13:35:11 GMT

What is SC - Smart Console? You probably wanted to use SMS - Security Management Server term. SmarConsole is a client you use to connect to SMS.

Re: VRRP cluster and SC control connections

Chris_Atkinson — Wed, 14 Dec 2022 14:15:05 GMT

How is the NAT configured manual entry or on the object itself?

Re: VRRP cluster and SC control connections

SergeyMkn — Wed, 14 Dec 2022 14:19:49 GMT

in SMS object -> NAT -> static on specific cluster. control connection checked

Re: VRRP cluster and SC control connections

PhoneBoy — Wed, 14 Dec 2022 19:17:58 GMT

When a static NAT is configured on the management object, gateways will reach out to both the private and public IPs to send logs.
As long as the management /log server is receiving logs from the gateway, there is no real issue.