- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- Is there a way to configure a Standalone machine (...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is there a way to configure a Standalone machine (Security Gateway + Security Management) to become a part of a HA Legacy Mode Cluster?
My appliance is directly connected to the internet with a public IP address, that's why I think is my only option. Is there a workarround to set up Full HA with an /30 network for my external interface? Thanks in advance.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is not a Full HA specific question, refer to the following SK: Configuring Cluster Addresses on Different Subnets
That said, I would consider carefully whether you want to use a Full HA cluster or not.
You may wish to read through some of the SKs linked here: How to install Full HA cluster on Check Point appliances
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is not a Full HA specific question, refer to the following SK: Configuring Cluster Addresses on Different Subnets
That said, I would consider carefully whether you want to use a Full HA cluster or not.
You may wish to read through some of the SKs linked here: How to install Full HA cluster on Check Point appliances
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Thanks Dameon for your reply, but I've allready read both SK and neither of them answer my question. The thing is that I want both my appliances to be in a cluster and act as my border router, we don't have a router to use as a border gateway. Here's a pic to understand better:
Is it possible?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
The Configuring Cluster Addresses on Different Subnets SK is how you would achieve what you are after.
More specifically, your Cluster IP would be the publicly routable IP you have.
You would also have a private (non-routable) subnet for the external interfaces--this is required for ClusterXL.
