Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
lullejd
Contributor
Jump to solution

DHCP client on cluster

Hi all,

 

We have a case where our client has an ISP with no static IP address. the client has a checkpoint cluster configured. Is it possible to have the external interface of these gateways to be assigned via DHCP by the ISP itself? How would the cluster IP be claimed? I cannot find anything related on CheckPoint's site.

 

Thanks

Senior Information Security Engineer
0 Kudos
1 Solution

Accepted Solutions
Wolfgang
Authority
Authority

That's not possible.

for a two node cluster you need at least 3 IP-addresses, 2 for the physical nodes and one for the Cluster-VIP.

PPPoE is one of the features to get an IP from the ISP, but this is not supported with ClusterXL.

Maybee you can put another small system in front of your firewall doing the ISP connection and forwarding all packets to the external interface of your firewall-cluster. But with this you are loosing your redundancy of your firewall-cluster.

Wolfgang

View solution in original post

2 Replies
Wolfgang
Authority
Authority

That's not possible.

for a two node cluster you need at least 3 IP-addresses, 2 for the physical nodes and one for the Cluster-VIP.

PPPoE is one of the features to get an IP from the ISP, but this is not supported with ClusterXL.

Maybee you can put another small system in front of your firewall doing the ISP connection and forwarding all packets to the external interface of your firewall-cluster. But with this you are loosing your redundancy of your firewall-cluster.

Wolfgang

PhoneBoy
Admin
Admin
Actually you only need one public IP, the other two IPS can be private.
However, the cluster IP cannot be obtained via DHCP, it must be static.
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events