Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Highlighted
Participant

DHCP client on cluster

Jump to solution

Hi all,

 

We have a case where our client has an ISP with no static IP address. the client has a checkpoint cluster configured. Is it possible to have the external interface of these gateways to be assigned via DHCP by the ISP itself? How would the cluster IP be claimed? I cannot find anything related on CheckPoint's site.

 

Thanks

Senior Information Security Engineer
0 Kudos
1 Solution

Accepted Solutions
Highlighted
Leader
Leader

That's not possible.

for a two node cluster you need at least 3 IP-addresses, 2 for the physical nodes and one for the Cluster-VIP.

PPPoE is one of the features to get an IP from the ISP, but this is not supported with ClusterXL.

Maybee you can put another small system in front of your firewall doing the ISP connection and forwarding all packets to the external interface of your firewall-cluster. But with this you are loosing your redundancy of your firewall-cluster.

Wolfgang

View solution in original post

2 Replies
Highlighted
Leader
Leader

That's not possible.

for a two node cluster you need at least 3 IP-addresses, 2 for the physical nodes and one for the Cluster-VIP.

PPPoE is one of the features to get an IP from the ISP, but this is not supported with ClusterXL.

Maybee you can put another small system in front of your firewall doing the ISP connection and forwarding all packets to the external interface of your firewall-cluster. But with this you are loosing your redundancy of your firewall-cluster.

Wolfgang

View solution in original post

Highlighted
Admin
Admin
Actually you only need one public IP, the other two IPS can be private.
However, the cluster IP cannot be obtained via DHCP, it must be static.
0 Kudos