topic Re: Configuring the second Maestro site to the first in Hyperscale Firewall (Maestro)

Configuring the second Maestro site to the first

yura_k — Mon, 10 Mar 2025 07:35:51 GMT

Greetings!

Please advise me if there are any pitfalls and negatives in the following situation.
It is determined that the Maestro infrastructure will be Dual Site.
We start with that on the second (backup) site, while the first (main) site is not ready, a site with identifier 2 and a security group of two gateways is created from one orchestrator.
A few months later, when the equipment arrives at the first site, the new orchestrator is configured as site 1, and the gateways are added to the SG, and the orchestrator sync ports are connected.

Re: Configuring the second Maestro site to the first

emmap — Mon, 10 Mar 2025 08:47:16 GMT

I don't think that we can create a 'site 2' only deployment. Last time I heard someone trying this there were problems, I think due to the MHOs refusing to do anything because they could not sync to the 'missing' orchestrators.

Re: Configuring the second Maestro site to the first

Nir_Shamir — Mon, 10 Mar 2025 10:06:55 GMT

Hi,

that's what I tried too. it doesn't work (doesn't see GWs and other issues).

you can start with a single site and then reconfigure it as dual.

Re: Configuring the second Maestro site to the first

Anatoly — Wed, 12 Mar 2025 04:58:48 GMT

Hi,

it doesn't really matter which site you're starting to build your setup from.

You can start with site #2, then add the first one.

Thank you