topic Re: Checkpoint cluster query in General Topics

Checkpoint cluster query

Abhishek_Kumar1 — Thu, 10 Jan 2019 20:01:21 GMT

Hi all

If we have a firewall in cluster with multicast mode and active/active setup.

If some how sync interface will disconnected.

In this scenario traffic will pass with which gateway.

Will it use pivate number or any other thing it will decide to pass the packet?

Please explain the same.

Re: Checkpoint cluster query

Danny — Fri, 11 Jan 2019 07:25:46 GMT

In the event of a sync failure on a Load Sharing cluster it’s very likely that only the pivot will remain in ‚active attention‘ while the others are in ‚problem‘ state. Depending on the type of issue also all cluster nodes could be ‚active attention‘. Without sync you‘ll then have network issues. Therefore make sure to read sk92804 for sync redundancy options.

Re: Checkpoint cluster query

JozkoMrkvicka — Fri, 11 Jan 2019 09:23:45 GMT

And what about ClusterXL HA in active/standby mode? In case sync between nodes is managed by single cable from one node to another ? Once the cable is broken/unplugged, it should cause both members to become Active (split brain), or?

Re: Checkpoint cluster query

Abhishek_Kumar1 — Fri, 11 Jan 2019 10:49:25 GMT

In your scenario your Active Firewall become in Active and in cluster status your it will show active attention and secondary device will show in down state.

it will never become Active/active after disconnecting sync cable

Re: Checkpoint cluster query

Abhishek_Kumar1 — Fri, 11 Jan 2019 14:31:29 GMT

But I guess Pivot table works in Unicast only, correct me if I am wrong