| CPUG | |
| The Check Point User Group | |
| A Resource For The Check Point Community. Fast. Useful. Independent. | |
|
| |||||||
![]() |
| | LinkBack | Thread Tools | Display Modes |
| |||
| Hello Everybody, I need help to understand what the manual mean by the following statement on Page#24 on ClusterXL User's guide: "2. The synchronization network may only include switches and hubs. No routers are allowed on the synchronization network, because routers drop Cluster Control Protocol packets." I have a DR site 50 miles away connected with Fiber. Right now it is connected using both end routers. So replacing these two routers with a Cisco Catalyst 6000 routing switch will meet this above statement need. I mean still we can router the other traffic using routing protocols? Please explain and also please let me know how you all have implemented. Is it is strongly suggested to have a dedicated Syncronization link? Appreciate your advice. |
| |||
| They mean that you have to bridge the CCP traffic, you can't route it. This only applies to the cluster interface obviously. You should use a dedicated interface on the firewall itself, although this often ends up going across a shared physical link if you're doing that sort of bridging. As long as bandwidth is OK it's not a problem. |
| |||
| Wow Northlandboy, How did you connected in such cases? Would you please list out the devices and the connections? Also is it a recommened secure way to have only the syncronization traffic on this WAN link; I am both ends with switches...?? |
| |||
| __________________ misery is optional |
| |||
| Hi Porter, I appreciate the response. What kind of typical throughput were you seeing through your firewalls, and how many firewalls did you have in the cluster? Sorry that this is the same queries asked by TDGAST in your orginal post "http://www.cpug.org/forums/showthread.php?p=8613#post8613" Appreciate your feedback and details... Praveen |
![]() |
| Thread Tools | |
| Display Modes | |
| |