topic Re: Synchronization Interface in a Cluster in General Topics

Synchronization Interface in a Cluster

RemoteUser — Wed, 16 Apr 2025 07:13:23 GMT

If I have a cluster, does the sync interface between two nodes need to be physically connected, or can it use a VLAN instead?
What happens if the two nodes are geographically distant from each other, or if I need to temporarily move one of the nodes—can synchronization still work?

Thanks

Re: Synchronization Interface in a Cluster

G_W_Albrecht — Wed, 16 Apr 2025 08:25:06 GMT

See the full story in https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_ClusterXL_AdminGuide/Topics-CXLG/Synchronization-Network.htm?tocpath=Synchronizing%20Connections%20in%20the%20Cluster%7C_____1

Question 1: You can use physical connections (like Node 1 Sync IF - switch - Node 2 Sync IF) or VLAN, but by design, the synchronization network is supported on the lowest VLAN tag only (https://support.checkpoint.com/results/sk/sk34574).

Question 2.: That is possible under the following conditions:

The synchronization network must guarantee no more than 100ms latency and no more than 5% packet loss.
The synchronization network may include only Layer 2 networking devices - switches and hubs. No Layer 3 routers are allowed on the synchronization network

See https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_ClusterXL_AdminGuide/Topics-CXLG/Synchronizing-Clusters-on-WAN.htm?tocpath=Synchronizing%20Connections%20in%20the%20Cluster%7C_____7

Re: Synchronization Interface in a Cluster

RemoteUser — Wed, 16 Apr 2025 08:40:17 GMT

thank you very much for the exasuative answer, so it can be done both ways.

The only thing I was wondering by reading also.
“R82 SmartConsole Help” says this:
Sync - A cluster synchronization interface. You must define one or more synchronization interfaces for redundancy. If you use more than one synchronization interface, you must define which interface is primary, secondary or tertiary. Synchronization redundancy is not supported on Small Medium Business appliances. Only primary synchronization can be selected on these appliances and only for the LAN2/SYNC interface. You cannot configure VLANs on the synchronization interface.

And the last sentence seems a bit at odds with this sk you sent me (which I had already seen) Using VLAN on cluster Sync interfaces
maybe to use sync, using a VLAN,it needs to be configured only on:
Cluster + Sync
and not on Sync.
is that correct?

What are your thoughts on this?

Re: Synchronization Interface in a Cluster

G_W_Albrecht — Wed, 16 Apr 2025 09:39:34 GMT

You have to read that in context:

Synchronization redundancy is not supported on Small Medium Business appliances. Only primary synchronization can be selected on these appliances and only for the LAN2/SYNC interface. You cannot configure VLANs on the synchronization interface.

--> This is only true for SMB appliainces running Embedded GAIA ! The R81.10 Cluster XL Admin Guide is for GAiA appliances / Open Server installations only.