topic How to control MGMT routing using PBR in Quantum R81.20 in General Topics

How to control MGMT routing using PBR in Quantum R81.20

TSOL — Tue, 17 Sep 2024 01:07:52 GMT

Hi Team

Thank you as always.

In a ClusterXL configuration with Quantum R81.20, I need to ensure that management-related services like NTP, syslog, cpuse, etc. communicate through the management port. If the NTP server or other services are not located in the connected segment, I believe that routing needs to be configured.

In cases where the business communication segment and the IP addresses of the NTP server and syslog server are on the same segment, can this be achieved using PBR (Policy-Based Routing)? Or is the management routing table separately configured, similar to Cisco routers?

Thank you for the advice.

Re: How to control MGMT routing using PBR in Quantum R81.20

emmap — Tue, 17 Sep 2024 02:57:41 GMT

You can look to enable MDPS:

https://support.checkpoint.com/results/sk/sk138672

Or you can rebuild the cluster as VSX, which gives you VS0 as the admin context that holds the management interface and a VS1 with a totally separate routing instance for production traffic.

Re: How to control MGMT routing using PBR in Quantum R81.20

TSOL — Tue, 17 Sep 2024 03:07:13 GMT

Thank you for the advice.

Are you saying that it's not possible to route management communication through a specific MGMT port using PBR?

Re: How to control MGMT routing using PBR in Quantum R81.20

emmap — Tue, 17 Sep 2024 03:17:09 GMT

I've not tried with PBR.

Re: How to control MGMT routing using PBR in Quantum R81.20

PhoneBoy — Tue, 17 Sep 2024 20:41:54 GMT

PBR rules do not apply for locally generated traffic per: https://support.checkpoint.com/results/sk/sk167135
The only supported method currently is MDPS.