hands-on installation runbook for Check Point Quantum Maestro, focused on the sequence that matters in the field: cabling the stack → configuring the MHO (orchestrator) → creating the Security Group → configuring the Security Group.
Why it’s important for us (and for anyone operating Maestro):
-
Reduces deployment risk by prescribing exact connectivity validation steps (not just “connect cables”), including LLDP neighbor checks to confirm orchestrators see all SGMs and backplane ports correctly.
-
Defines the core MHO bring-up (mgmt IP, default gateway, orchestrator amount) and then validates stack health using orch_stat (deployment status and port health).
-
Documents critical switch/uplink constraints that commonly break installs (ex.: SG management not as trunk; VPC requirements when using LACP).
-
Covers Security Group creation and interface assignment (drag/drop SGM + mgmt/traffic interfaces) plus the key config building blocks: management aggregation (magg) and traffic bonds (LACP/802.3ad) with VLANs.
-
Includes a high-impact operational warning: do not upgrade the Deployment Agent (CPUSE) during the process (called out for both orchestrator and security group steps).
In short: it’s a compact but very practical guide that helps ensure a Maestro environment is wired correctly, validated early, and configured in the right order, which directly improves stability and reduces troubleshooting time during rollout and expansion.
