topic Re: Elastic XL in General Topics

Elastic XL

jcisneros — Thu, 26 Feb 2026 22:51:24 GMT

I am creating an ElasticXL cluster. My question is: which interfaces need to be connected between the gateways? Only the SYNC interface, or which ones?

And what do I need to configure on the second member? Is it enough to just have the SYNC interface connected and that’s it? Will it appear automatically?

I’ve tried it, but the second gateway does not appear for me to add it.

Re: Elastic XL

the_rock — Thu, 26 Feb 2026 23:01:14 GMT

I believe you need another data interface as well, sync is not enough.

Re: Elastic XL

jcisneros — Thu, 26 Feb 2026 23:02:17 GMT

Can it be any interface and be in the same segment?

Re: Elastic XL

the_rock — Thu, 26 Feb 2026 23:06:51 GMT

I believe so, yes. Im not sadly elasticxl expert by any means, so maybe someone else can confirm for sure, but I think it can be any interface in L2 domain.

Re: Elastic XL

jcisneros — Thu, 26 Feb 2026 23:08:13 GMT

Okay, currently I'm using a back-to-back cable, meaning a cable between them so they can connect, but unfortunately my main computer isn't detecting it.

Re: Elastic XL

the_rock — Thu, 26 Feb 2026 23:11:49 GMT

Make sure its same VLAN segment and L2 domain.

Re: Elastic XL

PhoneBoy — Fri, 27 Feb 2026 00:16:19 GMT

For ElasticXL, you need a minimum of four interfaces on each gateway that are connected to the same Layer 2 network, covering Internal, External, Management, and Sync.
This is shown in the documentation: https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_ScalablePlatforms_AdminGuide/Content/Topics-SPG/ElasticXL/Working-with-ElasticXL.htm

Re: Elastic XL

jcisneros — Fri, 27 Feb 2026 00:22:20 GMT

So, if I wanted to create a lab and create an Elastic XL, I couldn't? Only with a back-to-back cable? Do I absolutely need four interfaces?

What would the interfaces be?

A-Management interface

B-External interface

C-Synchronization interface

D-Internal interface

Re: Elastic XL

PhoneBoy — Fri, 27 Feb 2026 00:44:38 GMT

You need four different L2 network segments.
They can be VLANs, though you usually do not put your sync on a VLAN.
And yes, those are what the segments are for.

Re: Elastic XL

emmap — Fri, 27 Feb 2026 01:24:48 GMT

You create your first gateway as an EXL cluster gateway. Connect up the interfaces you want to connect to your network, there's presumably an internal interface (that could also be the management interface, magg1) and an external interface. SIC it to management, get a policy on there, make sure it all works.

Install the second gateway. Don't do the FTW, just have it freshly installed. Connect the Sync interface back to back with the first gateway. Connect the other interfaces to the same network segments as the first gateway. Each gateway in an EXL cluster is a semi-independent node on the network, requiring connectivity on the same interfaces to the same networks, much the same as a CXL cluster. In fact, cable it exactly the same as you would a CXL cluster. Then the second gateway will be available from the Cluster interface in the WebUI of the first gateway under Pending Gateways. You can add it to the cluster there.