Configuring Cluster Addresses on Different Subnets

When using a cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., in which the Cluster Virtual IP address and physical IP addresses of Cluster Members are on different subnets, it is necessary to define the settings manually (see Example of Cluster IP Addresses on Different Subnets).

1. Define these static routes for each cluster Virtual IP address

   The required static routes must use applicable local member's interface as the next hop gateway for network of cluster Virtual IP address.

   If you do not define the static routes correctly, Cluster Members are not able to pass traffic.

   Note - In VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. Cluster, you must configure all routes only in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. in the VSX Cluster object.

   For configuration instructions, see the R82 Gaia Administration Guide - Chapter Network Management - Sections IPv4 Static Routes and IPv6 Static Routes.

2. Define the Cluster Members Network

   1. In SmartConsole, use the Classic Mode to manually create a new cluster.

   2. Define the Cluster Members and their physical interfaces.

   3. From the left tree, click Network Management.

   4. Select each cluster interface An interface on a Cluster Member, whose Network Type was set as Cluster in SmartConsole in cluster object. This interface is monitored by cluster, and failure on this interface will cause cluster failover. and click Edit.

   5. In the General section, in the Virtual IPv4 field, enter the IPv4 address.

   6. In the Member IPs, make sure the IP addresses are correct.

   7. Click OK.

   8. Install the Access Control Policy on this cluster object.

   For more details, see the chapter Configuring the Cluster Object and Members.