CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it yet again - That's right, the 3rd edition is here!
You can read his announcement post here.
It's a massive upgrade focusing on current versions, and well worth checking out. -E

 

Results 1 to 3 of 3

Thread: BGP routing in cluster

  1. #1
    Join Date
    2013-07-31
    Location
    Oslo, Norway
    Posts
    5
    Rep Power
    0

    Default BGP routing in cluster

    Hi,

    For a checkpoijnt cluster, when setting up BGP (ebgp). Does anyone have some info related to where/hops the session is set up ? Is it the phyusical address of the active node in the cluster that will have an active ebgp session ? And what do happen when the cluster fails over ?

    As far as I can see/read - you should never force the cluster to use the vip as the local peer address. (not talking about router id)

    ..and while Im at it.. BGP LISP vs Check Point ? anyone ? Is that even an option in check point ?

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,657
    Rep Power
    10

    Default Re: BGP routing in cluster

    peer from and to the VIP for a cluster. Make sure graceful restart is enabled. On failover BGP will do down but if i recall graceful restart keeps the routes until BGP session builds up again.

    my best guess is LISP is not supported, but i have nothing to back that up.

  3. #3
    Join Date
    2007-06-04
    Posts
    3,314
    Rep Power
    17

    Default Re: BGP routing in cluster

    https://supportcenter.checkpoint.com...oduct=Security

    Is BGP on Gaia

    Explicitly in there

    If configuring BGP on ClusterXL / VRRP cluster, then use cluster Virtual IP addresses.

    This is also true for the Router ID

    https://supportcenter.checkpoint.com...oduct=Security

    How to configure Graceful Restart

Similar Threads

  1. Replies: 7
    Last Post: 2018-01-30, 23:50
  2. Cluster Splat routing
    By 013rgk in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 3
    Last Post: 2012-04-30, 10:35
  3. Cluster Failover with Dynamic Routing
    By grobicheau in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 6
    Last Post: 2011-01-09, 23:16
  4. Routing on Nokia Cluster
    By netcool8 in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 0
    Last Post: 2007-01-24, 09:39
  5. Routing to the standby cluster member
    By lserge in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 1
    Last Post: 2006-07-11, 15:39

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •