topic Re: more than one mgmt IP on centraly managed Quantum Spark in Spark Firewall (SMB)

more than one mgmt IP on centraly managed Quantum Spark

Marcos_Bezerra — Wed, 15 May 2024 14:08:15 GMT

Hi, we have a situation on this customer and we want to know what are our options. (I made a drawing with the topology for better understanding)

They have a Mgmt server in the main office, we created a dummy object on smartconsole to represent the external IP adress of their MGmt server, to reach the internet, the traffic from the Mgmt server goes thru the internal checkpoint cluster, that has 3 IPS configured.

This Mgmt server communicates with the centrally managed SMB appliances via its external IP address. the issue is that on the SMB appliances we can only put 1 Mgmt ip address, but when this specific ISP goes down on the main office, we lose management of the SMB appliaces, because they all are configured to talk to a single IP of the Mgmt server.

The question is: what can we do in this scenario? is it possible to put more than 1 Mgmt IP adresses on the SMB firewalls?

Re: more than one mgmt IP on centraly managed Quantum Spark

the_rock — Wed, 15 May 2024 14:14:49 GMT

Not an expert is SMB appliances by any means, but I dont believe you can have more than 1 mgmt IP address, unless there is way to create alias IP or something. Let me spin up quick demo lab and will check.

Andy

Re: more than one mgmt IP on centraly managed Quantum Spark

the_rock — Wed, 15 May 2024 14:35:57 GMT

Just re-read your post again and I see its centrally managed, so demo lab wont help, as its locally managed appliance there. Can you check below option in smart console?

Andy

Re: more than one mgmt IP on centraly managed Quantum Spark

Marcos_Bezerra — Wed, 15 May 2024 15:04:00 GMT

hi andy, the issue is that here on this screen, we can only set one IP address, and here we put one specific external IP from the Mgmt server, but when this IPS drops, we lose management of the SMBs

Re: more than one mgmt IP on centraly managed Quantum Spark

the_rock — Wed, 15 May 2024 15:09:50 GMT

Isee what you mean. Might be worth TAC case to confirm for sure.

Andy

Re: more than one mgmt IP on centraly managed Quantum Spark

Marcos_Bezerra — Wed, 15 May 2024 17:30:44 GMT

yeah, I did that, they said they only work with "break & fix " scenarios, and told me to ask my account service, which I did, still waiting for the info, meanwhile I decided to see if someone here on checkmates can help

Re: more than one mgmt IP on centraly managed Quantum Spark

the_rock — Wed, 15 May 2024 17:34:33 GMT

Well, thats not really "break/fix", but still...Anywho, yes, let us know what your Sales person says. Personally, I would ask TAC to maybe check with tech lead/escalation team if this is possible, just to verify.

Best,

Andy

Re: more than one mgmt IP on centraly managed Quantum Spark

PhoneBoy — Fri, 17 May 2024 02:17:48 GMT

This problem also occurs on regular Quantum gateways when the management is behind a gateway that is doing ISP Redundancy...for more or less the same reason.

Unfortunately, there is not a good solution to this problem at current.