- Products
- Learn
- Local User Groups
- Partners
- More
Check Point Jump-Start Online Training
Now Available on CheckMates for Beginners!
Why do Hackers Love IoT Devices so Much?
Join our TechTalk on Aug 17, at 5PM CET | 11AM EST
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
ZTNA Buyer’s Guide
Zero Trust essentials for your most valuable assets
The SMB Cyber Master
Boost your knowledge on Quantum Spark SMB gateways!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
I’ve got 2 appliances with R80.10 version. I need configure HA ClusterXL.
But unfortunately only one valid IP was given to our company. Behind FW we use 192.168.0.0/16, 172.16.0.0/16 and 10.0.0.0/8 subnets.
Admin guide describe to use any IP on external interfaces ( ex. 10.1.1.0/30) and configure VIP with valid IP .
How do I need to make static routes on each node?
For internal subnets I did routes, but for external I don’t know which routes I need do.
Thanks
Configuring Cluster Addresses on Different Subnets
You need to create a scopelocal route for that interface.
In CLI:
set static-route <Public-IP> nexthop gateway logical <Interface> on
set static-route <Public-IP> scopelocal on
And there is a checkbox for the same thing in Web-interface.
Configuring Cluster Addresses on Different Subnets
You need to create a scopelocal route for that interface.
In CLI:
set static-route <Public-IP> nexthop gateway logical <Interface> on
set static-route <Public-IP> scopelocal on
And there is a checkbox for the same thing in Web-interface.
Big thanks!!!!
I'm running into the same problem like Andrey, but I've got two 1400 series appliances with embeded gaia R77.20.75. It seems embeded gaia does not support scopelocal (sk32073). Any Idea how to solve this on embeded gaia?
Thanks!
Mario
Afaik this is supported by GAiA + ClusterXL only, not Embedded GAiA - the only two Advanced Settings for Clusters are only present in StandAlone SMBs (Cluster - Use virtual MAC and NAT - Perform cluster hide fold). And sk32073 Configuring Cluster Addresses on Different Subnets is only for GAiA and SecurePlatform.
Hi Checkmates,
Is this also support in R80.30.
We already implemented in R80.10 but we plane to upgrade to R80.30.
So kindly update if some done this in R80.30.
Thanks and Regards
Thanks for the update
CLusterXL R80.30 Administration Guide:
We done this activity withone any issue.
Regards
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY