clusterxl with 1 public ip

[lior_me1]

hi

i'm settings up a cluster for an internet connection with 1 public ip

so how should i set the cluster members in terms of routing? 

how can i get them to go out to the internet?

[G_W_Albrecht]

I first would suggest a good read: R80.20 ClusterXL Administration Guide and later to use the 1 public IP for Cluster Virtual IP address.

[lior_me1]

can you point me to the reference? i can't find it

[Chinmaya_Naik]

Refer sk32073 (Configuring Cluster Addresses on Different Subnets)

@Chinmaya

[lior_me1]

is my case "different subnets?"
i have 1 public ip from the isp, and of course 1 gateway ip from the isp

so how should i set the cluster topology? i actually need to get the "world" to think that the ip that's trying to communicate with it is always the same public ip from the isp, even if a failover occurs

[lior_me1]

require advanced access, i dont have it 😞

[PhoneBoy]

It's described in the R80.20 ClusterXL Admin Guide in a section called Cluster IP Addresses on Different Subnets.
No Advanced Access required.

[Terry]

I agree with the others. Read up on clusterXL. It is a component of the firewalls but has little to do with the routing. I would consider them separate. Also, are you connecting this directly to your router or core switch? You will probably need to utilize trunking. 

A lot of different ways to set it up. 

[Jerry]

if your ClusterXL devices uses internet directly and your public IPs are on the External side of the Cluster you need at least 3 IPs.
One won't work as you need PRI/SEC and if using VMAC - VIP IP address that makes you actually having at least /29 subnet from your IPS. Period.

[AlekseiShelepov]

@Jerry, but that is not true. As mentioned previously, explanation on how to configure one public IP address for VIP and local addresses for each gateway provided in sk32073: Configuring Cluster Addresses on Different Subnets

One limitation here is when you need to manage a remote location and you have only 1 public IP, which is mentioned in the SK:

It is not possible to manage over the Internet the Cluster when IP addresses Addresses of its members and the VIP address are configured on different subnets.

But if you have the management server somewhere behind the inside interface of that cluster, it will work.

[Jerry]

@AleksiShalepov

fair enough my apologize, I have never seen ClusterXL with single Public IP on the External side. Sorry. I was always under an impression that this is not possible. Will get through this soon and revise what I know about it. Again my sincere SORRY.

[Jeroen_Demets]

will that work with gaia embedded devices such as 1400 appliances?

[PhoneBoy · Accepted solution]

From reading the SK, I don't believe this applies to the 1400 series.