topic Re: 61000/64000 VSX Cluster in Hyperscale Firewall (Maestro)

61000/64000 VSX Cluster

Michael_Rolbin — Wed, 28 Nov 2018 14:53:14 GMT

Good day,

I cannot find proper information about how to build 61000/64000 VSX VSLS and VSX ClusterXL (not clear from the documentation if ClusterXL supported or not).

To confirm the basic configuration of the chassis, I tested and configure single VSX with any number of VSs successfully.

How to configure 61000/64000 VSX Cluster in Management GUI and on 2 chassis the right way and order of operations?

Re: 61000/64000 VSX Cluster

Oral_Mohan — Wed, 28 Nov 2018 15:11:07 GMT

SP platform use their own clustering. In management, you need to create a VSX GATEWAY object, not a cluster. VSLS configuration is covered in the Admin Guide in the chassis GCLISH. Contact me offline for more details if you need.

Re: 61000/64000 VSX Cluster

Michael_Rolbin — Wed, 28 Nov 2018 16:39:15 GMT

Hi Oral, (trying to reach you in social nets) is the right order is:

1. Configure chassis HA configuration

2. Configure a single VSX in MGMT and push it to the chassis (thru SMO).

3. Configure VSLS on the chassis

Re: 61000/64000 VSX Cluster

Oral_Mohan — Wed, 28 Nov 2018 16:45:51 GMT

Essentially yes ->

1. Set up the chassis side (initial setup, security groups, licensing, JHF)

2. Create mgmt VSX object and SIC with chassis SMO.

3. Wait for completion + chassis reboot due to VSX config.

4. Create VS's in Mgmt.

4. Follow the admin guide steps under "Working with VSLS" for the VSLS setup.

Re: 61000/64000 VSX Cluster

Michael_Rolbin — Wed, 28 Nov 2018 16:55:45 GMT

Thank you! For step 1 - do I need to configure chassis HA at this stage?

Re: 61000/64000 VSX Cluster

Oral_Mohan — Wed, 28 Nov 2018 17:10:09 GMT

The primary and secondary chassis will auto-detect each other once Sync interfaces are connected. There is nothing to configure except adding SGMs from the secondary chassis to the security group to create the cluster. If you ordered a single chassis to begin with and are adding a new chassis, there is a possibility that the chassis ID on the new chassis will be "1". This needs to be changed to "2" on the CMMs in order to make it a secondary chassis (see SK111082 and others)

Re: 61000/64000 VSX Cluster

Michael_Rolbin — Wed, 28 Nov 2018 17:19:07 GMT

"There is nothing to configure except adding SGMs from the secondary chassis to the security group to create the cluster." - means to add to the security group of the Primary chassis?

Re: 61000/64000 VSX Cluster

Oral_Mohan — Wed, 28 Nov 2018 17:23:17 GMT

On the SMO typically (can be done during initial setup). The Security Group is shared on both chassis and can be edited on any SGM once they are Sync'd to the SMO.

Re: 61000/64000 VSX Cluster

Michael_Rolbin — Wed, 28 Nov 2018 17:25:11 GMT

Thanks a lot!