Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
sjni01
MVP Diamond
MVP Diamond

ClusterXL and Some Options to verify on ElasticXL

Hi Check Mates Community,

I’ve been noticing that there is already a fairly comprehensive body of documentation regarding Virtual MAC for ClusterXL in traditional environments as well as in VSX deployments. There are diagrams and a significant amount of detailed information available, which makes it relatively clear how this functionality is intended to operate in those contexts. However, this raises some questions when trying to map the same concepts to newer architectures.

https://sc1.checkpoint.com/documents/R82.10/WebAdminGuides/EN/CP_R82.10_ClusterXL_AdminGuide/CP_R82....

The VMAC Value is in the pag 109 of the first link too, however, it is clearer here:

https://sc1.checkpoint.com/documents/R80.40/WebAdminGuides/EN/CP_R80.40_ClusterXL_AdminGuide/Topics-...

In particular, I would like to confirm whether this aspect is being considered for ElasticXL architectures. In real-world use cases involving NAT/PAT over ElasticXL, not having Virtual MAC enabled appears to be quite sensitive and may introduce challenges or limitations in certain scenarios. This can have implications for traffic handling, failover behavior, and overall network stability, especially in more dynamic or large-scale environments. I was looking for it in the ElasticXL admin guide, and I found out asg_mac_resolver command is associated with SMAC and VMAC; however, maybe it is not sufficiently clear how to configure it or whether it covers this aspect.”

Given this, it would be very helpful to understand whether this feature is currently unsupported in ElasticXL or if it is something planned for future inclusion. If it is not yet available, having visibility into whether it is part of the product roadmap would be valuable for planning and design decisions. Any clarification on current capabilities and future direction would be greatly appreciated.

Regards,

0 Kudos
2 Replies
emmap
MVP Gold CHKP MVP Gold CHKP
MVP Gold CHKP

The asg_mac_resolver tool is just about letting you know what a MAC address is for, it doesn't configure things. In Scalable Platforms the VMAC equivalent is Same VMAC mode, though it has limitations in EXL that somewhat rule it out - you can't have more than one gateway per site when you use it.

https://support.checkpoint.com/results/sk/sk165674 

sjni01
MVP Diamond
MVP Diamond

Thanks for your feedback

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events