Support Center > Search Results > SecureKnowledge Details
Can I use the same interface for both IPSO Cluster Protocol traffic and Check Point State Synchronization? Technical Level
Solution

Check Point recommends using one interface for IPSO Clustering traffic and a different interface for Check Point State Sync with no other traffic running on these two interfaces for the Primary protocol network.

You can use secondary cluster protocol network and secondary Check Point state sync network on same interface. However in no case should the network environment be configured such that end-user data, Check Point State Sync data and the IP Clustering Sync data are transmitted on the same physical network interface.

Also, the IPSO clustering (heartbeat) link must be connected via a switch, not a crossover cable.

If you choose to run the IPSO Cluster Protocol on a network with other network traffic, including Check Point State Sync, you should increase the failure detection interval to avoid cluster instability due to bandwidth contention. This change will increase the recovery time in the event of a system failure. The cluster failure detection interval is available in Network Voyager on the Clustering Setup Configuration page. It is best to login to Network Voyager using "cadmin" (cluster admin). This will enable any changes made to one platform to be made to all platforms in the cluster at the same time.

Imported from Nokia support database
This solution is about products that are no longer supported and it will not be updated

Give us Feedback
Please rate this document
[1=Worst,5=Best]
Comment