GRE in Cluster environment

[D_W]

Hi Mates,

target: establish GRE Tunnel between a R81.10 Cluster and  a Linux Server by following sk169794 

Issue: in the underlay traffic (local IPs) always the cluster members IP is answering and not the Cluster IP!
In the screenshot you can see the remote peer 192.168.2.1 tries to reach the CP Cluster IP with 192.168.1.1 but the CP Member IP with 192.168.1.2 is answering. Is this by design?

With this the GRE is not working because we assume the Remote System doesn't know what to do with the cluster members IP. When we set it up like a single GRE it works!

KR
David

[PhoneBoy · Accepted solution]

I believe this is supposed to NAT behind the cluster address, as you can see here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
In any case, I suspect this is a bug and the TAC will be needed to assist with this.

[D_W]

Just wanted to give an update about the TAC case... TAC is still in research 🤧

[D_W]

Just wanted to update:
We needed an own NAT Rule so that the response from the ClusterMembers are changed to the ClusterVIP.
That was the first we tried but however the NAT rule took a few hours till it matched/become active 😖