topic Re: ClusterXL questions in Spark Firewall (SMB)

ClusterXL questions

HristoGrigorov — Thu, 17 May 2018 03:30:04 GMT

Hi,

I have two questions:

1. Cluster object -> General Properties -> IP Address. What is most appropriate to put here ? Just any of the many cluster IPs or one particular ?

2. Has anyone successfully used VMAC on SMB in productive ? Any problems I should be aware of ? I like the idea behind VMAC but I found mentioned on the next that it is not implemented quite properly.

Re: ClusterXL questions

PhoneBoy — Thu, 17 May 2018 04:27:16 GMT

The IP must be reachable to the management station for sure.

External-facing is usually the one chosen.

Re: ClusterXL questions

HristoGrigorov — Thu, 17 May 2018 05:03:30 GMT

Thanx. To be more specific I want to change that IP from say 192.168.0.253 to 192.168.0.254. I tried and it's telling me that some certificates needs to be regenerated and tell it needs to be done in "certificates tab". Where's this tab exactly ?

Re: ClusterXL questions

PhoneBoy — Thu, 17 May 2018 05:19:59 GMT

It would be in the IPSec VPN section of the cluster object.

Also, the IP should be one of the cluster IPs configured (and not, say, a completely different IP).

Re: ClusterXL questions

HristoGrigorov — Thu, 17 May 2018 05:27:30 GMT

Yes, that is the exact situation at the moment. Cluster IP is a completely different IP and I want to use one of the virtual IPs of the cluster LAN interfaces (the one that is in the same subnet as the management server).

Will there be any problems if I am using LAN cluster IP and not WAN ?

Re: ClusterXL questions

PhoneBoy — Thu, 17 May 2018 14:58:06 GMT

As long as the management can reach that IP, it should be ok.

Re: ClusterXL questions

HristoGrigorov — Thu, 17 May 2018 16:26:17 GMT

Thanx, I have successfully changed IP address.