Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Amir_Arama
Advisor

L3 mode and bridge mode together in ha configuration

Hi,

i have checkpoint cluster working as active/standby HA.

i need to connect bridge interface from each of these cluster members between internet and another device.

my question is:

1. is it supported to Combine layer 3 interfaces with bridge interfaces on the same GWs while working as a cluster?

2. do i need to configure the cluster as bridge mode via cpconfig? (because it's both)

3. how exactly does it behave? is the active member only will forward layer 2 on bridge interface, and the standby will not pass layer2 on the bridge interface? or can i make both of them process traffic on layer 2 bridge interface ?

 

thx

0 Kudos
3 Replies
Amir_Arama
Advisor

Anyone?

0 Kudos
the_rock
Champion
Champion

I will let other way more experienced in this answer you, but maybe below can help in the meantime:

https://sc1.checkpoint.com/documents/R80.20_GA/WebAdminGuides/EN/CP_R80.20_Gaia_AdminGuide/html_fram...

I will, however, take a "stab" at your questions:

1) I believe so

2) yes

3) I dont think it matters what type of interface it is, because if its HA config, passive member should never pass any traffic at all

0 Kudos
PhoneBoy
Admin
Admin

The clustering for Bridge Mode actually requires Active/Active, as I recall. 
Recommend reading through the limitations here: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

0 Kudos