CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


** Announcing the #CPUGchallenge **

I'm very happy to announce that CPUG will be hosting "The CPUG Challenge" during CPX this year.
It promises to be a fun and interesting event that will test (and maybe even expand) your knowledge of Check Point.
Whether or not you plan to attend CPX, we have something for you. Please check out this post or the CPUGchallenge.com web site for more information. -E

 

Results 1 to 4 of 4

Thread: Security Gateway Convert to Cluster

  1. #1
    Join Date
    2017-04-20
    Posts
    2
    Rep Power
    0

    Default Security Gateway Convert to Cluster

    Hi,

    I have checkpoint 77.30 environment with one firewall appliance and one management appliance.

    i'm planning to install another firewall and configure both firewalls into cluster.

    how can i join existing 77.30 standalone firewall to cluster?

    clusterxl is not enabled on exiting firewall.

  2. #2
    Join Date
    2006-03-08
    Location
    Lausanne
    Posts
    840
    Rep Power
    12

    Default Re: Security Gateway Convert to Cluster

    Quote Originally Posted by ranga1983 View Post
    Hi,

    I have checkpoint 77.30 environment with one firewall appliance and one management appliance.

    i'm planning to install another firewall and configure both firewalls into cluster.

    how can i join existing 77.30 standalone firewall to cluster?

    clusterxl is not enabled on existing firewall.
    Standalone usually means MGMT and GW on the same machine. If you have them on separate ones, then yes. Depending on clustering options you want to use, VRRP or ClusterXL needs to be enabled
    -------------

    Valeri Loukine
    CCMA, CCSM, CCSI
    http://checkpoint-master-architect.blogspot.com/

  3. #3
    Join Date
    2017-04-20
    Posts
    2
    Rep Power
    0

    Default Re: Security Gateway Convert to Cluster

    What would be the best way to achieve this.
    Is there any SK article for this?

  4. #4
    Join Date
    2005-08-14
    Location
    Gig Harbor, WA, USA
    Posts
    2,206
    Rep Power
    14

    Default Re: Security Gateway Convert to Cluster

    Refer to the ClusterXL Admin Guide.
    Basically you're already at Step 1 given that you have one gateway configured.
    You would need to set up the second gateway and then create the cluster object.
    If you want to use the current gateway IPs for the cluster IPs, you'll need to re-IP the current gateway (both in the OS and the gateway) before starting.
    http://phoneboy.com
    Unless otherwise noted, views expressed are my own

Similar Threads

  1. Convert externally managed Check Point gateway to internally
    By slowfood27 in forum SmartDashboard
    Replies: 4
    Last Post: 5 Days Ago, 03:47
  2. DR: Convert cluster to single node
    By belvdr in forum Check Point Disaster Recovery
    Replies: 2
    Last Post: 2009-10-22, 23:27
  3. Convert UTM-1 cluster to single gateway
    By chocko in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 0
    Last Post: 2008-10-29, 21:58
  4. Replies: 0
    Last Post: 2008-02-01, 22:19
  5. How to convert an existing FW to a A-S Cluster using Nokia VRRP?
    By eyunghans in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 1
    Last Post: 2007-12-13, 14:47

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •