ElasticXL cluster configuration on 9100 Appliance

[Hein009]

During the Elastic XL cluster configuration on two Check Point 9100 appliances, the Sync interface is directly connected between the members. However, the member does not join the cluster.

Is it required to connect the Sync interface through a switch and assign the same VLAN to the other member?

I would appreciate urgent guidance from anyone with real-world experience in deploying Elastic XL clusters.

[RemoteUser]

https://community.checkpoint.com/t5/Security-Gateways/ElasticXL-on-9100-and-9700-Appliances/td-p/248... maybe this can help you

more info here https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ScalablePlatforms_AdminGuide/Conte...

[emmap]

There is no requirement to run the Sync cable through a switch when there's only two members in the cluster. 

What are you seeing when you try to add the new cluster member?

[Hein009]

I don't receive any request from member appliance.

[emmap]

The second appliance has the correct version installed and you have not run the first time wizard? 

[Hein009]

Sure, Second Appliance running same version and didn't run first time wizard.

[emmap]

Might be best to work with TAC on this one, to check through everything.

[yukaia]

A dedicated switch/vlan is called out in the admin guide. 

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_ScalablePlatforms_AdminGuide/Conte...

[emmap]

Yes, if you have more than two devices in the cluster you need to use a switch, so that's what we have in the guide. 

[Alex-]

1. Connect first appliance to network, FTW it as ElasticXL
2. Install the recommended hotfix (60 as of today)
3. Create a Gateway object in your Smart Console, type ElasticXL
4. Install a policy, even a new one with no production yet
5. Boot up the second machine, ensure it's connected like the first and the Sync is indeed fully reachable by the first
6. Do not FTW the second machine
7. From there, it should be in "REQUEST TO JOIN"
8. Add it to your cluster and the first machine should stage it
9. Run insights on the first machine and observe the steps