<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: CP Cluster bgp question in General Topics</title>
    <link>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215288#M35529</link>
    <description>&lt;P&gt;I think it will be blackheld even with Graceful Restart enabled.&amp;nbsp;&lt;BR /&gt;Graceful Restart only helps when next-hop points to the VIP. This is the way we are doing.&lt;BR /&gt;But if standby node uses its own physical IP, a blackhold will occur during the failover.&lt;/P&gt;&lt;P&gt;Right ?&lt;/P&gt;</description>
    <pubDate>Mon, 27 May 2024 08:00:07 GMT</pubDate>
    <dc:creator>Gongya_Yu</dc:creator>
    <dc:date>2024-05-27T08:00:07Z</dc:date>
    <item>
      <title>CP Cluster bgp question</title>
      <link>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215265#M35524</link>
      <description>&lt;P&gt;Cluster member A with physical IP 192.168.1.1/24&lt;BR /&gt;Cluster member B with physical IP 192.168.1.2/24&lt;BR /&gt;&lt;BR /&gt;Member A with the following for export&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;set routemap default id 100 on&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;set routemap default id 100 allow&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;set routemap default id 100 match network 0.0.0.0/0 exact&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;set routemap default id 100 match protocol static&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;&lt;SPAN&gt;set routemap default id 100 action nexthop ip &lt;/SPAN&gt;&lt;SPAN&gt;192.168.1.1&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Member B with the following for export&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;set routemap default id 100 on&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;set routemap default id 100 allow&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;set routemap default id 100 match network 0.0.0.0/0 exact&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;set routemap default id 100 match protocol static&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;&lt;SPAN&gt;set routemap default id 100 action nexthop ip &lt;/SPAN&gt;&lt;SPAN&gt;192.168.1.2&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;&lt;SPAN&gt;When Cluster fails over, a blackhold will occur, right ?&lt;BR /&gt;&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;&lt;SPAN&gt;Reason:&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&lt;FONT face="courier new,courier" size="3" color="#000000"&gt;&lt;SPAN&gt;Before failover, member B does not have BGP peering, just synced with Member A for all the routes which points 192.168.1.1 as next-hop. When failover occurs and before member B establishes BGP relationship and advertises new next-hop (192.168.1.2), a blackhold occurs.&lt;BR /&gt;&lt;BR /&gt;Am I right ??&lt;/SPAN&gt;&lt;/FONT&gt;&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;</description>
      <pubDate>Mon, 27 May 2024 02:08:43 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215265#M35524</guid>
      <dc:creator>Gongya_Yu</dc:creator>
      <dc:date>2024-05-27T02:08:43Z</dc:date>
    </item>
    <item>
      <title>Re: CP Cluster bgp question</title>
      <link>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215266#M35525</link>
      <description>&lt;P&gt;When setting up dynamic routing on a CP cluster, all peers must use the cluster interface VIP to peer with and route to. Routing/peering to individual gateway IPs is not supported. Hence the configuration on each cluster member must be identical.&amp;nbsp;&lt;/P&gt;
&lt;P&gt;Tip: configure the router-id to a cluster VIP before configuring BGP, again identical across the cluster.&lt;/P&gt;</description>
      <pubDate>Mon, 27 May 2024 02:13:30 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215266#M35525</guid>
      <dc:creator>emmap</dc:creator>
      <dc:date>2024-05-27T02:13:30Z</dc:date>
    </item>
    <item>
      <title>Re: CP Cluster bgp question</title>
      <link>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215270#M35526</link>
      <description>&lt;P&gt;Yes, without BGP Graceful Restart and/or BFD features enabled, once failover occurs, there is short outage for BGP during re-establishment of peering from new member. It is described within&amp;nbsp;&lt;SPAN&gt;&lt;A href="https://support.checkpoint.com/results/sk/sk175923" target="_blank" rel="noopener"&gt;sk175923&lt;/A&gt;.&lt;/SPAN&gt;&lt;/P&gt;
&lt;P&gt;Best practise is to enable &lt;A href="https://support.checkpoint.com/results/sk/sk100499" target="_blank" rel="noopener"&gt;BGP Graceful Restart (sk100499)&lt;/A&gt;&amp;nbsp;and/or &lt;SPAN&gt;Bidirectional Forwarding Detection (BFD) with cBIT detection (&lt;A href="https://support.checkpoint.com/results/sk/sk175923" target="_blank" rel="noopener"&gt;sk175923&lt;/A&gt;)&amp;nbsp;&lt;/SPAN&gt;to mitigate this problem.&lt;/P&gt;</description>
      <pubDate>Mon, 27 May 2024 05:45:03 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215270#M35526</guid>
      <dc:creator>JozkoMrkvicka</dc:creator>
      <dc:date>2024-05-27T05:45:03Z</dc:date>
    </item>
    <item>
      <title>Re: CP Cluster bgp question</title>
      <link>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215288#M35529</link>
      <description>&lt;P&gt;I think it will be blackheld even with Graceful Restart enabled.&amp;nbsp;&lt;BR /&gt;Graceful Restart only helps when next-hop points to the VIP. This is the way we are doing.&lt;BR /&gt;But if standby node uses its own physical IP, a blackhold will occur during the failover.&lt;/P&gt;&lt;P&gt;Right ?&lt;/P&gt;</description>
      <pubDate>Mon, 27 May 2024 08:00:07 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215288#M35529</guid>
      <dc:creator>Gongya_Yu</dc:creator>
      <dc:date>2024-05-27T08:00:07Z</dc:date>
    </item>
    <item>
      <title>Re: CP Cluster bgp question</title>
      <link>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215298#M35530</link>
      <description>&lt;P&gt;thanks so much for clarification !!&lt;/P&gt;</description>
      <pubDate>Mon, 27 May 2024 09:36:02 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215298#M35530</guid>
      <dc:creator>Gongya_Yu</dc:creator>
      <dc:date>2024-05-27T09:36:02Z</dc:date>
    </item>
    <item>
      <title>Re: CP Cluster bgp question</title>
      <link>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215414#M35553</link>
      <description>&lt;P&gt;BGP should be configured to use VIP in cluster. You should also use the same VIP as router-id. Config for BGP within all cluster members should be the same.&lt;/P&gt;
&lt;P&gt;I also dont get what is the goal here. You want to propagate only default IPv4 static route ? What is config for BGP peers (show configuration bgp) ?&lt;/P&gt;
&lt;P&gt;You should use preference statement within routemaps to specify where to use routemap with "default" name.&lt;/P&gt;</description>
      <pubDate>Tue, 28 May 2024 19:32:17 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/CP-Cluster-bgp-question/m-p/215414#M35553</guid>
      <dc:creator>JozkoMrkvicka</dc:creator>
      <dc:date>2024-05-28T19:32:17Z</dc:date>
    </item>
  </channel>
</rss>

