SMB 1500 R81.10 - Cluster Virtual IP address belongs to a different subnet

[dede79]

Hello,

I need to configure VIP on different subnet on a SMB cluster - centrally managed - on WAN link (have not enought pub. IPs and Mgmt is directly connected).

So private IPs for the interfaces and a public IP as VIP. Problem is to set the default gateway - SMB Internet connection only allows configure Gateway in the same subnet. Adding a manual default route is also no possible.

Any idea?

[G_W_Albrecht]

Ask TAC - https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_ClusterXL_AdminGuide/Topics-... could apply.

[Chris_Atkinson · Accepted solution]

sk159772 suggests this should be possible in R81.10.x

[G_W_Albrecht]

ID

Description

Found In

Resolved In

01615874

When defining a locally managed cluster, the Virtual IP address of a clustered interface has to be in the same subnet as the real IP addresses of the cluster members.

R80.20 GA

R81.10.00

[dede79]

I use centrally managed - but actually as said I heve no idea how to configure the default gateway.

[xAnTx]

Hi!
Are you trying to configure DG before or after cluster configuration?
As far as I know, DG could be configured in subnet, other than actual IP address, only when cluster configuration already done on the appliance.
Means - try to configure cluster first (with all needed IPs), install policies, and only after that - change DG on members themselves.

[dede79]

cluster is configured - actually the issue is in configuring the default route on gaia embedded itself!

[Amir_Ayalon]

Have you tried R81.10.05 ?

[dede79]

for some reason my last post was deleted with the screensot of the issue.

[G_W_Albrecht]

Did you contact TAC already ?

[dede79]

I pushed issue to Checkpoint SE .....will post the solution here if I get one