CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
2. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
3. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Clustering (Security Gateway HA and ClusterXL)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-11-28
Fudge Fudge is offline
Junior Member
 
Join Date: 2006-11-28
Posts: 4
Rep Power: 0
Fudge has an average reputation (10+)
Default Configure HA for SPLAT

Can anybody point me in the right direction or provide any info on how to
configure high availability on SPLAT.
Reply With Quote
  #2 (permalink)  
Old 2006-11-28
Acidio Acidio is offline
Senior Member
 
Join Date: 2006-10-23
Location: Auckland, NZ
Posts: 110
Rep Power: 2
Acidio has an average reputation (10+)
Default Re: Configure HA for SPLAT

If you have access to the docs, the ClusterXL guide is a good place to start.
Reply With Quote
  #3 (permalink)  
Old 2006-11-28
Fudge Fudge is offline
Junior Member
 
Join Date: 2006-11-28
Posts: 4
Rep Power: 0
Fudge has an average reputation (10+)
Default Re: Configure HA for SPLAT

Quote:
Originally Posted by Acidio View Post
If you have access to the docs, the ClusterXL guide is a good place to start.
I couldnt get the budget for ClusterXL, I understand that SPLAT has a basic
active/passive HA function but I cant find any info on how to configure this
from the documentation.
Reply With Quote
  #4 (permalink)  
Old 2006-11-28
Acidio Acidio is offline
Senior Member
 
Join Date: 2006-10-23
Location: Auckland, NZ
Posts: 110
Rep Power: 2
Acidio has an average reputation (10+)
Default Re: Configure HA for SPLAT

Yeah, that can be a little misleading.

Historically, you needed to buy cluster xl as a product and the licenses. Now, the cluster xl technology/product (whatever you want to call it) is included. However, you still need an additional gateway license.
Reply With Quote
  #5 (permalink)  
Old 2006-12-01
Fudge Fudge is offline
Junior Member
 
Join Date: 2006-11-28
Posts: 4
Rep Power: 0
Fudge has an average reputation (10+)
Default Re: Configure HA for SPLAT

Quote:
Originally Posted by Acidio View Post
Yeah, that can be a little misleading.

Historically, you needed to buy cluster xl as a product and the licenses. Now, the cluster xl technology/product (whatever you want to call it) is included. However, you still need an additional gateway license.
My supplier is telling me I havent bought a ClusterXL license so cant use it.
I understood and checked with different suppliers beforehand that if I wanted HA on SPLAT all I needed is a second VPN Pro licence which I have.
If I wanted load sharing I would need ClusterXL.
We decided to just go for HA on SPLAT.
Now I am at the stage of configuring this I cant find any info on how to set this up.
Any help would be much appreciated.
Reply With Quote
  #6 (permalink)  
Old 2006-12-01
melipla melipla is offline
Senior Member
 
Join Date: 2006-01-25
Posts: 849
Rep Power: 3
melipla has an average reputation (10+)
Default Re: Configure HA for SPLAT

The ClusterXL doc explains how to setup HA. Its relatively simple really. You "enable cluster membership for this gateway" in cpconfig and setup a cluster object in the dashboard & add gateways to it.

FYI patching a cluster is always fun!

HTH
__________________
Its all in the documentation.
Reply With Quote
  #7 (permalink)  
Old 2006-12-03
Acidio Acidio is offline
Senior Member
 
Join Date: 2006-10-23
Location: Auckland, NZ
Posts: 110
Rep Power: 2
Acidio has an average reputation (10+)
Default Re: Configure HA for SPLAT

Cluster XL is the technology that handles HA. You don't need to license it for failover (active/passive). If you want to do load sharing (active/active), then I think there is additional cost.
Reply With Quote
  #8 (permalink)  
Old 2006-12-03
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,648
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Configure HA for SPLAT

Quote:
Originally Posted by Acidio View Post
If you want to do load sharing (active/active), then I think there is additional cost.
Yes, US$6,000 list/cluster
Reply With Quote
  #9 (permalink)  
Old 2006-12-07
starkeyd starkeyd is offline
Junior Member
 
Join Date: 2006-03-16
Posts: 9
Rep Power: 0
starkeyd has an average reputation (10+)
Default Re: Configure HA for SPLAT

I am running 2 SPLAT boxes and I had to purchase ClusterXL for HA. It will not work with out the license. The Load Balancing is another license you have to purchase on top of the ClusterXL one if you want to run that.
Reply With Quote
  #10 (permalink)  
Old 2006-12-13
chillyjim chillyjim is offline
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,648
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: Configure HA for SPLAT

Quote:
Originally Posted by starkeyd View Post
I am running 2 SPLAT boxes and I had to purchase ClusterXL for HA. It will not work with out the license. The Load Balancing is another license you have to purchase on top of the ClusterXL one if you want to run that.
Don't know what version you are running but as of NGX HA is included in the gateway license (Pro/Power anyway, might not be for Express). ClusterXL license ALWAYS enables loadshare even in NG and NGAI
Reply With Quote
  #11 (permalink)  
Old 2006-12-13
starkeyd starkeyd is offline
Junior Member
 
Join Date: 2006-03-16
Posts: 9
Rep Power: 0
starkeyd has an average reputation (10+)
Default Re: Configure HA for SPLAT

I'm running NGX/Pro R60 and was told by Checkpoint that I need it to run HA. I was also told that I need a seperate license to run Load Balancing. That came from Checkpoint as well. I'm not trying to say you are wrong, I am just stating what I was told by Checkpoint themselves.
Reply With Quote
  #12 (permalink)  
Old 2006-12-14
abusharif abusharif is offline
Senior Member
 
Join Date: 2006-04-27
Location: Twillight zone
Posts: 454
Rep Power: 3
abusharif has an average reputation (10+)
Default Re: Configure HA for SPLAT

if you are running express you do need extra HA license for the second gateway
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 19:57.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0