Interface - General

What can I do here?

Use this window to set the IPv4/6 addresses of the selected interface, and configure the topology.

Getting Here - Gateways & Servers> Select gateway/ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. > Edit > Network Management > Click the Expand button > Select an interface > Edit

Editing the Topology

Use this this window to edit the interface topology. If the gateway is a member of cluster, these options are available. This window shows topology information all detected interfaces in the cluster object and its related members.

General

  • Network Type - The purpose of the network connected to the selected interface:

    • Private - An interface that is not part of the cluster but can be monitored or not monitored.

      Monitored - An interface that is not part of the cluster, but ClusterXL monitors the member state and failover occurs if a fault is detected. Applies to third-party clusters, and not supported for Small Business appliances.

      Not Monitored - An interface that is not part of the cluster. ClusterXL does not monitor the member state and there is no failover. This option is recommended for the management interface.

    • Cluster - A cluster interface that connects to an internal or external network. Enter the cluster virtual IP addresses for each network (internal or external). These addresses must be located in the calculated subnet, and represent the cluster as a whole rather than individual cluster members.

      Virtual IPv4/IPv6 address - Lists virtual interfaces. These are secondary cluster IP addresses on the same member interface, and apply only to third party OPSEC configurations. For details regarding such configurations, refer to the appropriate OPSEC product user guide. Synchronization and private interfaces do not have virtual interfaces.

    • Sync - A cluster synchronization interface. You must define one or more synchronization interfaces for redundancy. If you are using more than one synchronization interface, define which interface is the primary, secondary, or tertiary interface. Synchronization redundancy is not supported on Small Medium Business appliances. On these appliances, you can only select 1st sync and only for the LAN2/SYNC interface. You cannot configure VLANs on the synchronization interface.

    • Cluster + Sync - Cluster interface that is also a synchronization interface. This option is less secure and is not recommended. This option in not supported for Small Business appliances.

    Note - Changing the Network Type changes the Advanced options. For example, selecting Cluster + Sync adds Synchronization order to the Advanced Options. Selecting Private adds the Monitoring option to the Advanced page.

Member IPs

The physical IP address for each member interface.

Topology

Type of network (Internal or External) for Anti-Spoofing protection.