Create a Post
Showing results for 
Search instead for 
Did you mean: 

Deploying new VLANs in production

Hello, world.

A query, I currently have a ClusterXL which has configured in its interface Eth2 of each Firewall:

FW 01 ->
FW 02 ->
VIP ->

What we need, is to put a new segment in that same interface, (

In this scenario, it is ideal to leave configured the segment that currently already has the interface, and add the new segment as a VLAN?

Or is it necessary to leave the interface blank by default and configure the 2 segments as different VLANs?

What is the best practice in your experience?

This type of configuration, it is advisable to always start it in the passive member, and then in the active, and all this, in a working window, right ????

Thanks for your comments.

0 Kudos
3 Replies

In general, changes of this nature should be done on the passive member first, OS level changes first, then update the configuration in SmartConsole.
And yes, this will definitely need to be done in a maintenance window.

0 Kudos

Thank you for your response.

For this type of configuration that I have exposed.

Do you think it is necessary, to break the ClusterXL????

In your experience, is it feasible to leave the interface as it is now configured, with one IP, and add the new segment as a VLAN?
Or is it better to "leave the interface blank" and configure the 2 segments as distinct VLANs? ????


0 Kudos

Note that ClusterXL requires the interface configuration to be the same on both cluster members.
Generally interfaces with VLANs should only have VLANs configured on it (i.e. no IP on the physical interface).
That implies "leave the interface blank" as you put it.
Not sure if that's a hard requirement or just best practice.

0 Kudos


Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events