topic Re: Dual site Dual Maestro external Sync purpose in Hyperscale Firewall (Maestro)

Dual site Dual Maestro external Sync purpose

puneet — Thu, 05 Dec 2024 06:47:34 GMT

I want to know the purpose of Maestro dual site dual MHO external sync port. what configuration and info it will sync with site2 standby site ?

as per documentation it will only sync the MHO conf sync not the session table then how standby site SMO will get the session info (backup connection) via Hyper Sync?

Re: Dual site Dual Maestro external Sync purpose

Nir_Shamir — Thu, 05 Dec 2024 07:05:50 GMT

The external sync ports are used for MHO configuration sync AND is used for connectivity between all SGM's, including connections sync.

it's a trunk port with VLANS for each connection:

on MHO-1 - 3951 (MHO Sync) ,3600(encapsulates SG Sync 3801-3808 VLANS)

on MHO-2 - 3952 (MHO Sync) ,3601(encapsulates SG Sync 3801-3808 VLANS)

Re: Dual site Dual Maestro external Sync purpose

puneet — Thu, 05 Dec 2024 07:09:48 GMT

Thank You.

Is there any documentation available for the same ?

Re: Dual site Dual Maestro external Sync purpose

Nir_Shamir — Thu, 05 Dec 2024 07:18:13 GMT

Check this SK

https://support.checkpoint.com/results/sk/sk168092