- Products
- Learn
- Local User Groups
- Partners
- More
The Great Exposure Reset
24 February 2026 @ 5pm CET / 11am EST
CheckMates Fest 2026
Watch Now!AI Security Masters
Hacking with AI: The Dark Side of Innovation
CheckMates Go:
CheckMates Fest
I’ve got 2 appliances with R80.10 version. I need configure HA ClusterXL.
But unfortunately only one valid IP was given to our company. Behind FW we use 192.168.0.0/16, 172.16.0.0/16 and 10.0.0.0/8 subnets.
Admin guide describe to use any IP on external interfaces ( ex. 10.1.1.0/30) and configure VIP with valid IP .
How do I need to make static routes on each node?
For internal subnets I did routes, but for external I don’t know which routes I need do.
Thanks
Configuring Cluster Addresses on Different Subnets
You need to create a scopelocal route for that interface.
In CLI:
set static-route <Public-IP> nexthop gateway logical <Interface> on
set static-route <Public-IP> scopelocal on
And there is a checkbox for the same thing in Web-interface.
Configuring Cluster Addresses on Different Subnets
You need to create a scopelocal route for that interface.
In CLI:
set static-route <Public-IP> nexthop gateway logical <Interface> on
set static-route <Public-IP> scopelocal on
And there is a checkbox for the same thing in Web-interface.
Big thanks!!!!
Thanks a lot @AlekseiShelepov , you saved my day. Why on earth is this command "set static-route <Public-IP> scopelocal on" NOT mentionned in admin guide ? If you don't add this, the routes through local interface don't appear in the routing table! Incredible
I'm running into the same problem like Andrey, but I've got two 1400 series appliances with embeded gaia R77.20.75. It seems embeded gaia does not support scopelocal (sk32073). Any Idea how to solve this on embeded gaia?
Thanks!
Mario
Afaik this is supported by GAiA + ClusterXL only, not Embedded GAiA - the only two Advanced Settings for Clusters are only present in StandAlone SMBs (Cluster - Use virtual MAC and NAT - Perform cluster hide fold). And sk32073 Configuring Cluster Addresses on Different Subnets is only for GAiA and SecurePlatform.
Hi Checkmates,
Is this also support in R80.30.
We already implemented in R80.10 but we plane to upgrade to R80.30.
So kindly update if some done this in R80.30.
Thanks and Regards
Thanks for the update
CLusterXL R80.30 Administration Guide:
We done this activity withone any issue.
Regards
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 22 | |
| 21 | |
| 13 | |
| 9 | |
| 9 | |
| 9 | |
| 9 | |
| 8 | |
| 7 | |
| 7 |
Thu 12 Feb 2026 @ 05:00 PM (CET)
AI Security Masters Session 3: AI-Generated Malware - From Experimentation to Operational RealityFri 13 Feb 2026 @ 10:00 AM (CET)
CheckMates Live Netherlands - Sessie 43: Terugblik op de Check Point Sales Kick Off 2026Thu 19 Feb 2026 @ 03:00 PM (EST)
Americas Deep Dive: Check Point Management API Best PracticesThu 12 Feb 2026 @ 05:00 PM (CET)
AI Security Masters Session 3: AI-Generated Malware - From Experimentation to Operational RealityFri 13 Feb 2026 @ 10:00 AM (CET)
CheckMates Live Netherlands - Sessie 43: Terugblik op de Check Point Sales Kick Off 2026Thu 19 Feb 2026 @ 03:00 PM (EST)
Americas Deep Dive: Check Point Management API Best PracticesAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY