vsx_util convert_cluster

Description

Converts the VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. mode between High Availability A redundant cluster mode, where only one Cluster Member (Active member) processes all the traffic, while other Cluster Members (Standby members) are ready to be promoted to Active state if the current Active member fails. In the High Availability mode, the Cluster Virtual IP address (that represents the cluster on that network) is associated: (1) With physical MAC Address of Active member (2) With virtual MAC Address. Synonym: Active/Standby. Acronym: HA. (default) and Virtual System Virtual Device on a VSX Gateway or VSX Cluster Member that implements the functionality of a Security Gateway. Acronym: VS. Load Sharing A redundant cluster mode, where all Cluster Members process all incoming traffic in parallel. For more information, see "Load Sharing Multicast Mode" and "Load Sharing Unicast Mode". Synonyms: Active/Active, Load Balancing mode. Acronym: LS..

Important - Before you run the vsx_util commands:

Back up the VSX environment. See sk100395: How to backup and restore VSX gateway.
You must close all SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. clients. Failure A hardware or software problem that causes a Security Gateway to be unable to serve as a Cluster Member (for example, one of cluster interface has failed, or one of the monitored daemon has crashed). Cluster Member that suffered from a failure is declared as failed, and its state is changed to Down (a physical interface is considered Down only if all configured VLANs on that physical interface are Down). to do so may result in a database lock error.
On a Multi-Domain Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server., you must switch to the context of the Main Domain Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. that manages the VSX Gateway Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0. / VSX Cluster object.

Use the command "mdsenv <IP Address or Name of Domain Management Server>".

Important:

The only mode available for a VSX Cluster that was installed as R81.10 and higher is Virtual System Load Sharing (VSLS).
The High Availability mode is available only if you upgrade a VSX Cluster from R81 or lower to R81.10.

You can also convert a VSLS cluster to the High Availability mode (see the R81.10 VSX Administration Guide > section "Changing the VSX Cluster Type").
It is not supported to run the vsx_util convert_cluster command to convert a VSX Cluster from the High Availability mode to the VSLS mode when the VSX Cluster contains a Virtual Switch Virtual Device on a VSX Gateway or VSX Cluster Member that functions as a physical switch. Acronym: VSW. that is not assigned to any physical interface or to a VLAN interface.

Syntax

vsx_util convert_cluster

Required Input

Comments

Execute the command and follow the instructions on the screen.
When you convert from Virtual System Load Sharing to High Availability:
- All Virtual Systems are Active on the same VSX Cluster Member Security Gateway that is part of a cluster. by default.
- Peer Virtual Systems are Standby on other VSX Cluster Members.