topic Re: Maestro SG Management in Hyperscale Firewall (Maestro)

Maestro SG Management

Alex_Shpilman — Fri, 23 Apr 2021 11:35:33 GMT

Hi Check Mates,

Can multiple security groups be managed out of the same management ports on the MHO using magg interfaces?

On MHO-170 there are 2 management ports, which can split to 8x10G, which is aligned with the amount of possible security groups.

However, the MHO-140 can have only 4 management ports, so I suppose it should be supported but can't find any reference of that in the admin guide.

It seems a bit of an overkill to have 2x 10G (active/standby) management ports per SG...

Thanks.

Re: Maestro SG Management

Anatoly — Mon, 26 Apr 2021 05:27:04 GMT

Dear Alex,

Regarding MHO-170, you can split only one Management port (port 1), as in case of splitting port 2 will be disabled. So, in order to get 8 management ports, you need two orchestrators.

Regarding using same management ports for different security groups - it is possible, but only if you use management IPs within the same broadcast domain.

Thank you,

Re: Maestro SG Management

Alex_Shpilman — Mon, 26 Apr 2021 10:42:01 GMT

Thanks @Anatoly