Dear Check Point,
according to the different manuals I`ve read concerning SRC-MAC of CCP- and Forward-Packages and it is not recommended to set <MAC magic> any more by hand.
(See sk-25977-Change Source MAC Addresses - Gateway Mode - Gaia R80.10 - Procedure)
It is stated there, that the algorithm for the MAC magic is the following:
"During the initial configuration of the cluster members, they apply the following algorithm to set the MAC magic value:
- Try to set the 5th byte of the Source MAC address to 1.
If CCP packets with such value in the 5th byte of the Source MAC address are detected, then select the next value. - Try to set the 5th byte of the Source MAC address to 2.
If CCP packets with such value in the 5th byte of the Source MAC address are detected, then select the next value. - And so on and so forth, until an unused value is detected (it takes up to ~30 seconds).
Note: All members of the same cluster will set the same value."
I am wondering, because this (locally limited) algorithm will, for each Cluster with a separated/dedicated sync-network, find the same value for its <MAC magic> (so the Cluster-ID).
According to the same SK there should be a unique Cluster-ID for all (managed) Clusters within the domain: "Enter a unique value for each cluster in the domain."
The above algorithm will not find the other Clusters if they have separated sync-networks. So as far as I understand, there will be the same Cluster-ID along many clusters ( in this case always the ID 1).
Could you please clarify this for me?
Best regards