topic Cluster of two 1200 R devices in bridge mode in Spark Firewall (SMB)

Cluster of two 1200 R devices in bridge mode

Sanja_Rakic — Wed, 27 Nov 2019 13:15:54 GMT

Hello everybody,

I have two Check Point 1200R devices and they have just one bridge made of two LAN interfaces connected to the rest of the network. I want to create HA cluster and I constantly fail. These gateways are being centrally managed.

All interfaces are up, but once I try to get the topology, I constantly see just one of the LAN interfaces making cluster.

Do you have any idea how to troubleshoot it?

Best regards,

Sanja

Re: Cluster of two 1200 R devices in bridge mode

HristoGrigorov — Wed, 27 Nov 2019 13:53:18 GMT

As mentioned in the manual:

"Note - Bridge and switch configurations are not supported in cluster configuration."

Re: Cluster of two 1200 R devices in bridge mode

Sanja_Rakic — Wed, 27 Nov 2019 14:00:14 GMT

Hi HristoGrigorov,

Thanks for the fast reply. Can you please send me link to documentation you are mentioning?

Cause I have read this one https://dl3.checkpoint.com/paid/0c/0c5fc88ad25131eb37d674518a213a61/CP_R77.20.81_1200R_1400_Appliance_CentralAdminGuide.pdf?HashKey=1574859222_e827b62c60e566d48cf6bdb71fc2a29d&xtn=.pdf

and on page 16 it is written that Note - Cluster in bridge in Active/Standby mode is supported in 1200R and 1400 appliances.

Re: Cluster of two 1200 R devices in bridge mode

G_W_Albrecht — Wed, 27 Nov 2019 15:00:43 GMT

I would contact TAC to resolve this during RAS,,,

Re: Cluster of two 1200 R devices in bridge mode

HristoGrigorov — Wed, 27 Nov 2019 17:19:37 GMT

It is written right here:

https://sc1.checkpoint.com/documents/R77.20.81/1200R_1400_Local_AdminGuide/html_frameset.htm

Re: Cluster of two 1200 R devices in bridge mode

Sanja_Rakic — Thu, 28 Nov 2019 08:23:49 GMT

Hello,

Thanks for the reply. That is admin guide for locally managed appliances. I have centrally managed, and in this guide it is written possible.

Support also sent me the same guide as you have, so I am a little bit confuzed. Not sure if really not possible or I am doing something wrong.

Re: Cluster of two 1200 R devices in bridge mode

HristoGrigorov — Thu, 28 Nov 2019 10:18:31 GMT

I do not think this functionality depends on the way appliance is managed. It is more like lack of support at a lower level.

Re: Cluster of two 1200 R devices in bridge mode

G_W_Albrecht — Thu, 28 Nov 2019 12:39:34 GMT

Did you configure it following sk122659: Cluster in Active-Standby bridge mode in 1200R / 1400 centrally managed appliances ?