- Products
- Learn
- Local User Groups
- Partners
-
More
Celebrate the New Year
With CheckMates!
Value of Security
Vendor Self-Awareness
Join Us for CPX 360
23-24 February 2021
Important certificate update to CloudGuard Controller, CME,
and Azure HA Security Gateways
How to Remediate Endpoint & VPN
Issues (in versions E81.10 or earlier)
Mobile Security
Buyer's Guide Out Now
Important! R80 and R80.10
End Of Support around the corner (May 2021)
Good day,
I cannot find proper information about how to build 61000/64000 VSX VSLS and VSX ClusterXL (not clear from the documentation if ClusterXL supported or not).
To confirm the basic configuration of the chassis, I tested and configure single VSX with any number of VSs successfully.
How to configure 61000/64000 VSX Cluster in Management GUI and on 2 chassis the right way and order of operations?
SP platform use their own clustering. In management, you need to create a VSX GATEWAY object, not a cluster. VSLS configuration is covered in the Admin Guide in the chassis GCLISH. Contact me offline for more details if you need.
Hi Oral, (trying to reach you in social nets) is the right order is:
1. Configure chassis HA configuration
2. Configure a single VSX in MGMT and push it to the chassis (thru SMO).
3. Configure VSLS on the chassis
Essentially yes ->
1. Set up the chassis side (initial setup, security groups, licensing, JHF)
2. Create mgmt VSX object and SIC with chassis SMO.
3. Wait for completion + chassis reboot due to VSX config.
4. Create VS's in Mgmt.
4. Follow the admin guide steps under "Working with VSLS" for the VSLS setup.
Thank you! For step 1 - do I need to configure chassis HA at this stage?
The primary and secondary chassis will auto-detect each other once Sync interfaces are connected. There is nothing to configure except adding SGMs from the secondary chassis to the security group to create the cluster. If you ordered a single chassis to begin with and are adding a new chassis, there is a possibility that the chassis ID on the new chassis will be "1". This needs to be changed to "2" on the CMMs in order to make it a secondary chassis (see SK111082 and others)
"There is nothing to configure except adding SGMs from the secondary chassis to the security group to create the cluster." - means to add to the security group of the Primary chassis?
On the SMO typically (can be done during initial setup). The Security Group is shared on both chassis and can be edited on any SGM once they are Sync'd to the SMO.
Thanks a lot!
About CheckMates
Learn Check Point
Advanced Learning
WELCOME TO THE FUTURE OF CYBER SECURITY