Check Point Firewall R80.40 - Training Lab 6 | Cluster XL failover and priority

In this video we try to change priority of members and also reboot one of the members to see all the failover statuses within Cluster XL.

This video is part of the Free Check Point CCSA Training and we basing it on R80.40 that is currently the newest recommended release from check point.

[marcooconnor]

Another Excellent video mate! I have learned more off you than i did at the CCSA course! haha

[rizwanrashid]

Thanks for the simplifying the concept

[junnairmanla]

Hi Magnus,

Just want to thank you personally for creating informative contents in YouTube.

I just want to check with you if the below steps are correct if I'm going to replace a cluster (2 FWs) with 2 new replacement units.

1. Do a snapshot on both existing FWs (FW01 - Active; FW02 - Standby)
2. Add the snapshots to the replacement units (FW-A; FW-B)
3. Remove the existing 'FW02 - Standby' from the Cluster.
4. Replace the 'FW02 - Standby' with the new FW-B.
5. Re-establish SIC then Push Policy.
6. Add the licenses.
7. Add the new FW-B to the Cluster.
8. Failover from the Active (old FW01) to the new FW-B
9. Remove the existing 'FW01 - Active' from the Cluster.
10. Replace the 'FW01 - Active' with the new FW-A.
11. Re-establish SIC then Push Policy.
12. Add the licenses.
13. Add the FW-A to the Cluster.
14. Do testing for connections

[MD-hetu]

Hello Magnus, Thaks you for creating informative Checkpoint Videoes to learn more, share the steps to replace failed cluster member RMA the same firewall in checkpoint firewall r80.20

[luisfcaetano]

Magnus, I think you need to put your videos on CheckMates.

[Sabs]

@Magnus Holmberg question: the failover is a LAN level? what happen with the internet connections?

[ranghelsoto]

Hi, Magnus.
A query, how could I validate, what is the priority that has each of my teams that belong to the clusterxl I have configured?
Is there any command to know the priority that has each of the teams?
If I am working with the "Switch to higher priority Cluster Member" option, how can I validate, what is the priority of each Cluster Member?
Because when I increase each Gateway, I only see the option "Increase priority, or Decrease priority", but I would like to know how to know which is the priority that each one of the devices have by default.

[Sabs]

you are showing how the fail over work, but how did you set it up?

[marciomoura]

Hi Magnus, completed the lab. Too bad youtube can't send the print.

[vinodsrinivasan]

Hi Sir, I have few questions. Pls reply once u find time,
1. What are PNOTES ? Why is it needed and what it checks ?
2. In Load sharing (Active-Active) unicast mode, there is something called Pivot. What is Pivot meant by ? How it processes traffic like 30%(active) 70%(stand by).
3. Where do we see like Cluster control protocol is running between 2 members ? Can we see via CLI ? What are all the things CCP monitor ?
4. Any advanced troubleshooting or issues faced video for cluster xl ?
5. What is Secure XL ? Please provide detailed video or any link for understanding secure xl and it's troubleshooting part.

[annithakur]

I have a query.. Why Version above r80.10 doesn't support HA in active active mode?

[dirkdigs]

Hi Magnus, How can I setup an email alert that notifies me each time my cluster does fail-over?

[xemphim]

Hi bro. I finished the cluster. But it’s not sync config when I change on web. Can you help me

[vivekprajapati]

sir request to you kindly make ccse full course lab in detail with troubleshooting.