Query on Configuring interface to be not monitored in cluster but part of cluster.

[bookman]

Hi Team ,

Would like to know if we remove the Monitored interface from the cluster and make it has Private does it loose the VIP and the interface doesn't participate in the cluster anymore ?

Setup details :

Checkpoint R80.20 in Cluster setup.

CCP mode: Manual (Unicast)
Required interfaces: 6
Required secured interfaces: 1

ClusterXL VLAN monitoring per interface:

Interface | Low VLAN | High VLAN

eth2-03 | 3XX | 6XX
eth1-01 | 3XX | not configured

Interface Name: Status:
eth1-01.XXX UP

Security GW: Lowest and highest VLANs are monitored per interface.

Updated

-------------------------

Like Cisco ASA (#no monitor-interface commands) we can disable monitoring from cluster.

But if we configure the Checkpoint with the network type private we cannot assign virtual IP address

Also If we configure interface as Private, can we enable RIP/DHCP without issue and what would be the gateway for downstream device if device get failover ?

Also confirm are we going to lose VIP if we select network type as Private.

If interface is part of cluster and we do not want to monitor that interface, like Cisco ASA is possible and there might have option in checkpoint as well.

Appreciate any response on the above query.

Thanks in advance.

[Chris_Atkinson]

Dynamic routing is currently not supported on cluster member private interfaces per sk116815.