MDPS config tip

[the_rock]

Hey guys,

Just wanted to share something based on the post I made about this issue below:

https://community.checkpoint.com/t5/Security-Gateways/ClusterXL-issue-with-MDPS-enabled/m-p/267496#M...

While upgrade to R82.10 fixed web UI access, as well as cluster, here is something worth mentioning.

For one cluster, we had to run cphastop and cphastart on backup member to get cluster going and for the other one, after upgrade, we had to disable and re-enable sync interface, as it just kept showing down for some time.

As far as mdps config, just run below 5 commands from clish and reboot (obviously, change cpu number as needed and also assign mgmt and sync as per right if name). Oddly enough, I could not replicate this issue in my R82 lab at all, with exact same R82 jumbo 60 as customer. For me, all worked perfectly fine.

Hope that helps:

set mdps interface Sync sync on

set mdps interface Mgmt management on

set mdps mgmt plane on

set mdps resource cpus 4

set mdps mgmt resource on

[CheckPointerXL]

mdps config tip: do not use it

lot of critical sk/bugs with it

if you wanna it, think to move to vsx

[the_rock]

In R82.10, it works really well actually.

[CheckPointerXL]

good but historically it triggers a lot of problems

better to move to vsx if data plane separeration is needed

cpXL

[the_rock]

I cant really say much about it, since my experience is very limited. I just made that post based on the issue I had with the client in hopes it can help others if they encounter the same.

[the_rock]

FWIW, below is what AI shows...did not check the actual links (might be this one lol), but still : - )