How to control MGMT routing using PBR in Quantum R81.20

[TSOL]

Hi Team

Thank you as always.

In a ClusterXL configuration with Quantum R81.20, I need to ensure that management-related services like NTP, syslog, cpuse, etc. communicate through the management port. If the NTP server or other services are not located in the connected segment, I believe that routing needs to be configured.

In cases where the business communication segment and the IP addresses of the NTP server and syslog server are on the same segment, can this be achieved using PBR (Policy-Based Routing)? Or is the management routing table separately configured, similar to Cisco routers?

Thank you for the advice.

[emmap]

You can look to enable MDPS:

https://support.checkpoint.com/results/sk/sk138672

Or you can rebuild the cluster as VSX, which gives you VS0 as the admin context that holds the management interface and a VS1 with a totally separate routing instance for production traffic.

[TSOL]

Thank you for the advice.

Are you saying that it's not possible to route management communication through a specific MGMT port using PBR?

[emmap]

I've not tried with PBR.

[PhoneBoy · Accepted solution]

PBR rules do not apply for locally generated traffic per: https://support.checkpoint.com/results/sk/sk167135 
The only supported method currently is MDPS.