Is there any case of configuring ClusterXL Active-Standby Bridge mode?

[ChoiYunSoo]

Hi

There is a firewall that the customer is using in Bridge mode.(R80.30)

I am upgrading the firewall to R81.10 in November and want to change the configuration to ClusterXL Active-Standby while maintaining Bridge mode.

Is there any case of using ClusterXL bridge mode as Active-Standby like me?

If configuration is possible, do Active and Standby devices perform session synchronization normally?

Are there any possible problems with the above configuration?

Thanks

[Chris_Atkinson · Accepted solution]

It is documented in the ClusterXL admin guide, also there are some STP considerations. Please refer:

https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/207617....

[ChoiYunSoo]

thank you for the reply

If you see the checkpoint guide, it is recommended not to use STP on the upper and lower switches.

Can you tell me why??

[PhoneBoy]

Because we're not truly a Layer 2 device and STP requires that.
See: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[ChoiYunSoo]

Thanks for the sincere reply

I referenced the attached SK115963, but looking at the affected versions of that document, it's from r77.10 to r77.30.
Does this issue affect all versions of Checkpoint Equipment overall, except for the version shown? (Customers are planning to install new version R81.10)

[PhoneBoy]

The recommendation not to use STP goes back to the earliest days of Check Point and hasn't changed.

[ChoiYunSoo]

It was very helpful thanks for the reply