ClusterXL with One Public IP

[Kakarot]

Good day All,

I have two Spark 2530 appliance (running R82.00.00 gaia embedded) in a cluster. I have only two public IPs in a mask range of /30 from our ISP provider. Can we achieve ClusterXL with only these two public IPs??

In the ClusterXL admin guide section "Cluster IP Addresses on Different Subnets" page 191. The instructions references "Network management" and this option is not available in our Spark 2530 cluster deployment. Does that mean we cannot achieve Clustering with only two IPs on 2530 appliances??

https://sc1.checkpoint.com/documents/R81.20/WebAdminGuides/EN/CP_R81.20_ClusterXL_AdminGuide/CP_R81.... 

[Chris_Atkinson · Accepted solution]

Is the cluster locally managed or is it managed via central management with a security management server (SMS)?
See the R82.00.X admin guide here: https://sc1.checkpoint.com/documents/Appliances/Quantum_Spark_R82.00.X/AdminGuides_Centrally_Managed... 

[Steffen_Appel]

Just an addition to the document, do not use non private IP-addresses for the interface, but use some from RFC1918 unlike the example.

[Kakarot]

Thanks much. I did try this for the most part. I was having trouble when i selected "get interfaces with topology", It automatically placed a dummy IP address in and was reading my "WAN" interface as internal. But i did not have all settings as prescribe in the guide. So i will try this and advise later in the week. 

Thanks again to u and Chris

[Kakarot]

The Cluster is managed by a Smart-1 SMS appliance

[morris]

Are management and cluster at the same location? Then it should work:

"Important Note - The management must be internal or have an internal interface, and the SIC is established internally."

[Kakarot]

As an update. This does not work for me. Maybe my situation is different. 

Issue

ISP provided only two public IPs

Steps Taken:

1. Created private IP subnet for "WAN" interfaces on both gateways
2. Added private IP on "WAN" interface via web GUI and used public IP gateway address  as gateway
3. disable probing
4. added static route
5. when attempted to edit "topology" via smart console
   1. edit the "WAN" interface with our private IPs 
   2. It does not allow addition of public IP as VIP while "WAN" interfaces are private IPs

The documentation advise that this was possible. should i open a Check support ticket?

[emmap]

Yes, if the system is not letting you configure something as the documentation suggests it should, please raise a ticket.

[Kakarot]

Hello All,

This is not supported on GAIA embedded platform. which means our SMB spark appliance is not compatible with thsi feature.

we have to enable the "scopelocal" feature and this is not supported. see SK32073

Excerpt:

"scopelocal" is not supported on Gaia Embedded. Hence, this feature is not supported for SMB.

https://support.checkpoint.com/results/sk/sk32073 

[PhoneBoy · Accepted solution]

A cluster with a single public IP is supported on SMB appliances from R81.10.05.
https://sc1.checkpoint.com/documents/Appliances/Quantum_Spark_FAQ/Content/Topics/Cluster.htm