CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


Tim Hall has done it again! He has just released the 2nd edition of "Max Power".
Rather than get into details here, I urge you to check out this announcement post.
It's a massive upgrade, and well worth checking out. -E

 

Results 1 to 3 of 3

Thread: BGP routing in cluster

  1. #1
    Join Date
    2013-07-31
    Location
    Oslo, Norway
    Posts
    5
    Rep Power
    0

    Default BGP routing in cluster

    Hi,

    For a checkpoijnt cluster, when setting up BGP (ebgp). Does anyone have some info related to where/hops the session is set up ? Is it the phyusical address of the active node in the cluster that will have an active ebgp session ? And what do happen when the cluster fails over ?

    As far as I can see/read - you should never force the cluster to use the vip as the local peer address. (not talking about router id)

    ..and while Im at it.. BGP LISP vs Check Point ? anyone ? Is that even an option in check point ?

  2. #2
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,654
    Rep Power
    10

    Default Re: BGP routing in cluster

    peer from and to the VIP for a cluster. Make sure graceful restart is enabled. On failover BGP will do down but if i recall graceful restart keeps the routes until BGP session builds up again.

    my best guess is LISP is not supported, but i have nothing to back that up.

  3. #3
    Join Date
    2007-06-04
    Posts
    3,313
    Rep Power
    17

    Default Re: BGP routing in cluster

    https://supportcenter.checkpoint.com...oduct=Security

    Is BGP on Gaia

    Explicitly in there

    If configuring BGP on ClusterXL / VRRP cluster, then use cluster Virtual IP addresses.

    This is also true for the Router ID

    https://supportcenter.checkpoint.com...oduct=Security

    How to configure Graceful Restart

Similar Threads

  1. Replies: 7
    Last Post: 2018-01-30, 23:50
  2. Cluster Splat routing
    By 013rgk in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 3
    Last Post: 2012-04-30, 10:35
  3. Cluster Failover with Dynamic Routing
    By grobicheau in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 6
    Last Post: 2011-01-09, 23:16
  4. Routing on Nokia Cluster
    By netcool8 in forum Check Point IP Appliances and IPSO (Formerly Sold By Nokia)
    Replies: 0
    Last Post: 2007-01-24, 09:39
  5. Routing to the standby cluster member
    By lserge in forum Clustering (Security Gateway HA and ClusterXL)
    Replies: 1
    Last Post: 2006-07-11, 15:39

Tags for this Thread

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •