CheckPoint Maestro R81.20 Nexus N9K-C9504 - VPC implementation

katarina_ — Thu, 02 Jan 2025 14:45:25 GMT

Hi Community,

We are deploying two Maestro systems R81.20, bundled and connected via VPC to nexus switches, and exploring the best configuration approach. Each appliance should be connected to Nexus 9k switched via VPC port channel.

Are there any potential issues to watch out for or pitfalls to avoid this setup?

Thank you

Katarina

Re: CheckPoint Maestro R81.20 Nexus N9K-C9504 - VPC implementation

HeikoAnkenbrand — Sat, 04 Jan 2025 18:21:15 GMT

Hi @katarina_,

Here an cabeling example for "Maestro Single Side" with two gateways and "N9K" (VPC):

This is a default config, as you can implement it:

1) On the N9K you only need to configure LACP channel and on the MHO side LACP bond interface's for example "Bond1" and "Bond2".
2) You should not configure LACP on the magg1 bond interfaces (management interface) .
3) A little tip! For transceivers with the version “D” you still have to set the speed, otherwise they will not be recognized by the MHO.

topic Re: CheckPoint Maestro R81.20 Nexus N9K-C9504 - VPC implementation in Hyperscale Firewall (Maestro)

CheckPoint Maestro R81.20 Nexus N9K-C9504 - VPC implementation

Re: CheckPoint Maestro R81.20 Nexus N9K-C9504 - VPC implementation