- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
I’ve got 2 appliances with R80.10 version. I need configure HA ClusterXL.
But unfortunately only one valid IP was given to our company. Behind FW we use 192.168.0.0/16, 172.16.0.0/16 and 10.0.0.0/8 subnets.
Admin guide describe to use any IP on external interfaces ( ex. 10.1.1.0/30) and configure VIP with valid IP .
How do I need to make static routes on each node?
For internal subnets I did routes, but for external I don’t know which routes I need do.
Thanks
Configuring Cluster Addresses on Different Subnets
You need to create a scopelocal route for that interface.
In CLI:
set static-route <Public-IP> nexthop gateway logical <Interface> on
set static-route <Public-IP> scopelocal on
And there is a checkbox for the same thing in Web-interface.
Configuring Cluster Addresses on Different Subnets
You need to create a scopelocal route for that interface.
In CLI:
set static-route <Public-IP> nexthop gateway logical <Interface> on
set static-route <Public-IP> scopelocal on
And there is a checkbox for the same thing in Web-interface.
Big thanks!!!!
I'm running into the same problem like Andrey, but I've got two 1400 series appliances with embeded gaia R77.20.75. It seems embeded gaia does not support scopelocal (sk32073). Any Idea how to solve this on embeded gaia?
Thanks!
Mario
Afaik this is supported by GAiA + ClusterXL only, not Embedded GAiA - the only two Advanced Settings for Clusters are only present in StandAlone SMBs (Cluster - Use virtual MAC and NAT - Perform cluster hide fold). And sk32073 Configuring Cluster Addresses on Different Subnets is only for GAiA and SecurePlatform.
Hi Checkmates,
Is this also support in R80.30.
We already implemented in R80.10 but we plane to upgrade to R80.30.
So kindly update if some done this in R80.30.
Thanks and Regards
Thanks for the update
CLusterXL R80.30 Administration Guide:
We done this activity withone any issue.
Regards
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY