- Products
- Learn
- Local User Groups
- Partners
- More
Maestro Masters
Round Table session with Maestro experts
Dear team,
Device’s list:
Customer wishes to test Maestro redundancy, diagrams are attached
Downlink :
Case 1: Shutdown 1/56/1 and 2/55/1 => Lost the security group and lost connectivity (lost ping)
Case 2: Shutdown 1/55/1 and 2/56/1 => Lost the security group and lost connectivity (lost ping)
Case 3: Shutdown 1/55/1 or 1/56/1 => MHO-01 detach
Case 4: Shutdown 2/55/1 or 2/56/1 => MHO-02 detach
I get the result as above but it seems to be wrong.
As I understand MHOs are running Active/Active and we are in full mesh deployment, if 1 or 2 downlink go down, the other links should work properly and the Security Group should be up.
Might we have any explanation or document about Maestro redundancy?
Thank you very much,
Binh
Hi Binh,
For context can you please share the following additional information:
- VPC configuration
- Bond2 configuration
- R80.20SP JHF version used on the MHO-140
- R80.30SP JHF version used on the 7000
Dear Chris,
vPC Configuration: LACP Active, with 4x40G physical links
Bond2: 802.3ad, with 4x40G physical links
MHO R80.20SP JHF 310
SGM R80.30SP JHF 47
Regards,
Binh.
SGM need to have a connection to both MHOs in order for it to be considered UP. So if you have a single connection between each SGM and MHO and you cut one of them, the specific SGM will go DOWN. However, if you reboot the entire MHO, the connections are retained. Use dual-links between SGMs and MHOs if you want the SGM to stay up if one downlink is cut.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
User | Count |
---|---|
18 | |
3 | |
2 | |
2 | |
2 | |
1 | |
1 | |
1 | |
1 | |
1 |
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY