cancel
Showing results for 
Search instead for 
Did you mean: 
Create a Post

R80.30 cheat sheet - ClusterXL

Introduction

This overview gives you an view of the changes in R80.30 ClusterXL. All R80.10 and R80.20 changes are contained in this command overview (cheat sheet). You could download the cheat sheet at the end of this article as a PDF file.

Cheat Sheet

Chapter

Architecture:
R80.x Security Gateway Architecture (Logical Packet Flow)
R80.x Security Gateway Architecture (Content Inspection) 
R80.x Security Gateway Architecture (Acceleration Card Offloading) 
R80.x Ports Used for Communication by Various Check Point Modules 

Performance Tuning:
R80.x Performance Tuning Tip - AES-NI 
R80.x Performance Tuning Tip - SMT (Hyper Threading) 
R80.x Performance Tuning Tip - Multi Queue 
R80.x Performance Tuning Tip - Connection Table 
R80.x Performance Tuning Tip - fw monitor
R80.x Performance Tuning Tip - TCPDUMP vs. CPPCAP 
R80.x Performance Tuning Tip – DDoS „fw sam“ vs. „fwaccel dos“ 

Cheat Sheet:
R80.x cheat sheet - fw monitor 
R80.x cheat sheet - ClusterXL 

More interesting articles:
Article list (Heiko Ankenbrand)

References
44 Replies

Re: R80.30 cheat sheet - ClusterXL

Top!

Marco_Rea
Ivory

Re: R80.30 cheat sheet - ClusterXL

Nice

Re: R80.30 cheat sheet - ClusterXL

Nice Cheat Sheet for ClusterXL.

Thanks Heiko Ankenbrand‌ Smiley Happy

Re: R80.30 cheat sheet - ClusterXL

Heiko,

Very nice sheet, maybe you could rename it from SecureXL Cheatsheet to ClusterXL Cheat sheet? 😉

Regards, Maarten.

Regards, Maarten

Re: R80.30 cheat sheet - ClusterXL

Thank you for pointing that out. I took the template from SecureXL and accidentally didn't change the header name to ClusterXL.

Thanks
Heiko

Highlighted

Re: R80.30 cheat sheet - ClusterXL

Done

Re: R80.30 cheat sheet - ClusterXL

Do you have any other cheat sheets?
I think it would be good if there were some on other topics too.

Thanks Heiko Ankenbrand

Re: R80.30 cheat sheet - ClusterXL

Heiko, thank you so much for sharing your deep knownledge!

Re: R80.30 cheat sheet - ClusterXL

Thanks Heiko. Quite useful. It would be good to know if these commands would also work on .SP version since R80.20SP is coming soon.

Admin
Admin

Re: R80.30 cheat sheet - ClusterXL

Great post 


Re: R80.30 cheat sheet - ClusterXL

-  Great post

We need more sheat sheets:-)

Re: R80.30 cheat sheet - ClusterXL

We should create more cheat sheets to different topics.

Re: R80.30 cheat sheet - ClusterXL

nice post

Re: R80.30 cheat sheet - ClusterXL

Other cheat sheet's coming soon!

Regards

Heiko

Re: R80.30 cheat sheet - ClusterXL

Other cheat sheet's coming soon!

Re: R80.30 cheat sheet - ClusterXL

THX,

Heiko

Re: R80.30 cheat sheet - ClusterXL

great work

Re: R80.30 cheat sheet - ClusterXL

Nice cheat sheet.

Re: R80.30 cheat sheet - ClusterXL

Great  Job!

Re: R80.30 cheat sheet - ClusterXL

@heiko

Do you have any more cheat sheets?

Regards

Levis

Re: R80.30 cheat sheet - ClusterXL

Thanks to share! Very useful.

Ralp_B_
Ivory

Re: R80.30 cheat sheet - ClusterXL

Can I disable session sync between gateways with "fw ctl setsync off/start"?

0 Kudos

Re: R80.30 cheat sheet - ClusterXL

Very nice ClusterXL cheet sheat.

0 Kudos

Re: R80.30 cheat sheet - ClusterXL

Hi @HeikoAnkenbrand 

I found the command fcu in your overview.

Do you have any experience with a full connectivity update?

It doesn't always work.

Re: R80.30 cheat sheet - ClusterXL

If you follow this document, clusters can be upgraded without downtime or a loss of state sync at any point:

Best Practices - Cluster Connectivity Upgrade (CU)

Probably wouldn't be a bad idea to add this great document to the links above...

 

"IPS Immersion Training" Self-paced Video Class
Now Available at http://www.maxpowerfirewalls.com

Re: R80.30 cheat sheet - ClusterXL

This is very interresting.

0 Kudos

Re: R80.30 cheat sheet - ClusterXL

Great work! Thanks for sharing.

Thanks,
Mo
0 Kudos

Re: R80.30 cheat sheet - ClusterXL

Great job Heiko!

This is a very impressive piece of knowledge, thanks for sharing it with the community.

One side note thought. This part is not yet properly documented, as we all know, because R80.30 is not yet in GA.

Screenshot 2019-04-10 at 16.54.14.png

 

For that matter, I urge some caution when using commands related to ccp encryption. Especially, I would not recommend setting up your own custom encryption key at all. For each cluster, a unique key is generated automatically, and tampering with this setting might lead to unpredicted cluster behaviour. 

 

Re: R80.30 cheat sheet - ClusterXL

Helpful cheat cheat.

Thanks