Step 5: Configure the Cluster

Make sure the required Security Appliances are connected to the relevant Downlink ports on all Orchestrators.

On your workstation, in a web browser, connect to the IPv4 address of the Management port on the first Orchestrator:
```
https://<IPv4 Address of Management Port>
```
Configure the required Cluster (Security Group):
1. In the left panel, in the Orchestrator Management section, click the Clusters page.
2. Click New Cluster.
On the Assign Gateways page:
1. Click Add Gateway.
2. Select the checkboxes of the required Security Appliances.
3. Click Add Selected.
  
  Important:
  
  The first Security Appliance in the list is automatically designated as the Single Management Object (SMO). The SMO is the Cluster Member through which the Management Server communicates with the Cluster. You can reorder this list with the Up and Down buttons on the top toolbar.
4. Click Next.
On the General Settings page:
1. In the Host name field, configure the required string.
2. Optional: In the Description field, enter the applicable text to describe this cluster.
3. In the Admin Password and the Confirm Admin Password fields, enter the password for the Gaia OS on this cluster.
  
  Warning:
  
  Keep this password in a secured location. Share this password only with authorized personnel.
4. In the SIC Password and the Confirm SIC Password fields, configure the one-time activation key to establish a secure communication with the Management Server.
  
  Warning:
  
  Keep this password in a secured location until you connect this cluster to the Management Server. Share this password only with authorized personnel performing the deployment.
5. To configure this cluster in the VSNext mode, select Configure as VSNext Cluster.
6. Click Next.
On the Management Interface page:
1. In the Interfaces field, select the one or more ports to use for management. Selecting two ports creates a bonded management interface (MAGG).
2. In the Bond mode section, configure the required mode - Active - Backup, XOR, or LACP.
3. In the IPv4 address field, configure the required IPv4 address and mask length.
4. In the Default IPv4 Gateway field, configure the required IPv4 address
5. Optional: In the Default IPv6 Address field, configure the required IPv6 address and mask length.
6. Optional: In the Default IPv6 Gateway field, configure the required IPv6 address
7. Click Next.
On the Uplinks page:
1. In the Interfaces field, select the required interfaces. These are the external-facing interfaces that connect to your network switches or routers.
2. Click Next.
On the Summary page:
1. Review the settings.
2. Click Apply.
3. Click Apply to confirm.
On the Cluster Created page, click Close.
On the left, click the new Cluster card to see the details in the right panel.

Note:

It takes several minutes for all Security Appliances to complete the joining process and transition to the Active state..
Configure the required settings on the Management Server:
1. Connect with SmartConsole to the Security Management Server / relevant Domain Management Server.
2. Create a new Security Gateway object. Use the SIC Password your configured on the Orchestrator.
  
  See the R82.20 Security Management Administration Guide > Chapter "Managing Gateways" > Section "Creating a New Security Gateway".
3. Configure the required Access Control Policy and install it.
  
  See the R82.20 Security Management Administration Guide > Chapter "Creating an Access Control Policy".
4. Configure the required Threat Prevention Policy and install it.
  
  See the R82.20 Threat Prevention Administration Guide.