ClusterXL and virtual interfaces

[al00ha]

Does anyone know if ClusterXL is supposed to support virtual interfaces?, after my research and a lot of testing I just can’t get it working so I guess it’s not?
I’m running NGX, CP-Express, ClusterXL, HA New Mode on Win2003.

I guess only the interfaces that is seen by fw ctl iflist on the gateways are able to be used as cluster interfaces and the virtual addresses doesn’t show up there?

Does anyone have a solution or workaround to this problem, Without this function its impossible to use multiple internal subnets on the same interface and to install about 30 hardware interfaces is not an option. Has anyone ran in to this problem before?

Thanks in advance
Regards
/Johan Ahlstrom

[flawless_cowboy]

No checkpoint does not support multinetting and interface. The way this needs to be setup in order to work is with VLANs. You can still use a single network card, but you create virtual interfaces that use 802.1q VLAN tags. The virtual interfaces will then show up as seperate interfaces (even at the OS level ) not all network cards are capable of this, but many are. It sounds to me like you have one physical network with many logical networks, if that is the case you would need to redesign you entire LAN and create seperate broadcast domains for each network (VLANs). At that point you could assign the vlan tags to the server running checkpoint and create the interfaces needed.

[al00ha]

Thanks alot!
Didn´t think about that.
Currently using 802.1q VLAN tags on the switches so this solution will be easy to implement.