topic Re: SMB Cluster Route redundancy in Spark Firewall (SMB)

SMB Cluster Route redundancy

Oryx — Fri, 13 Jun 2025 11:08:37 GMT

Hi,

We have and end customer with multiple remote sites with 1590/1570 Clusters that connect to the resources on the DC and the Internet over a 9300 Cluster. They are running OSPF, so the remote sites can advertise their local networks and the Main DC advertise the default route.

Now they are deploying a new Backup DC and want to have a redundant link over that Backup DC. So far, so good for me. I'm sharing a little diagram.

My issue is that the end customer has configured the port WAN as Internet connection, which forces to configure a default gateway, defining a default route on the Routing Table.

So, how can I announce a default over OSPF from the BACKUP DC and make sure that the traffic comming from the Remote Site uses that second link, if I have a default static route announced through the WAN port? Can the Monitoring feature (disabled at this moment) be helpful for this? Or my only option is to reconfigure the connection on the WAN Port as normal, without being an Internet connection type?

Many thanks in advance.

Kind regards.

P.S.: All of the clusters are managed on a On Prem Security Management.

Re: SMB Cluster Route redundancy

Chris_Atkinson — Fri, 13 Jun 2025 13:19:11 GMT

If needed you should be able to manipulate this Advanced setting/value:

OS advanced settings - Default route rank

Routing protocol ranks should be aligned with normal GAiA in theory:

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_Advanced_Routing_AdminGuide/Topics-GARG/Routing-Options-Protocol-Rank.htm#:~:text=The%20protocol%20rank%20is%20the,routes%20to%20the%20same%20destination.

Re: SMB Cluster Route redundancy

Oryx — Fri, 13 Jun 2025 14:05:54 GMT

Hi,

Thanks. I was not aware of this option. However, if everything goes normally, the OSPF rank is 10, which will prevail over the static route rank 60. So, in theory, the OSPF route will have precedence over the static one, right?

Kind regards.

Re: SMB Cluster Route redundancy

Chris_Atkinson — Fri, 13 Jun 2025 14:35:02 GMT

If it's a normal OSPF route that's correct if it shows as the other type you may need the above option but you can evaluate the rank at the time and adjust accordingly.

Re: SMB Cluster Route redundancy

Oryx — Fri, 13 Jun 2025 14:43:56 GMT

The OSPF route is showing as "inactive", but I think it's because of the route-map applied. Anyway, I will need to try and check.

Thanks for your help.

Kind regards

Re: SMB Cluster Route redundancy

Oryx — Tue, 17 Jun 2025 10:04:23 GMT

Hello,

A quick update, just to finish the question. 😀

The issue was not on the Route Map, which are pretty straightforward. The thing is that the OSPF route are appearing as External Type, which have a default Rank of 150, greater than 60 of the static default route. I've changed that advanced parameter to 180 and the OSPF default route is now being used, as it should be.

Thanks a lot for your help!

Have a nice day.