What is the recommended way to have a redundant Sync connection between the cluster nodes?
What is the recommended way to have a redundant Sync connection between the cluster nodes?
The recommended way to have a redundant Sync connection between the cluster nodes is to use a group of bonded interfaces connected to different switches. Define a dedicated sync interface, only one interface per node using the SmartConsole / Gateways & Servers -> select Cluster Properties / Network Management. This approach ensures high availability and redundancy by utilizing bonded interfaces and different switches, enhancing the resilience of the network connection between the nodes.
BUT: https://support.checkpoint.com/results/sk/sk92804 Connect the Sync bond interface of each member to the same switch or VLAN or Back-to-Back. If the same VLAN can be on different switches then the answer should be absolutly correct,
There can be only one SYNC interface and Virtual IP is not used.
A is correct
Sorry!!!! D is Correct !!!
Administrators can define only one Sync interface in the cluster configuration
Few comments here so lets clear this up. A&C are incorrect as they define two sync interfaces, only one sync interface is required. B is incorrect as a Virtual IP is not used for Sync interfaces D is the only answer left that is valid, bonded interfaces via different switches provides best resilience https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_ClusterXL_AdminGuide/Topics-CXLG/ClusterXL-Requirements-and-Compatibility.htm?tocpath=ClusterXL%20Requirements%20and%20Compatibility%7C_____1#Supported_Topologies_for_Synchronization_Network
Based on this practical installation aritcle im going with D on this https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92804#Procedure
A is correct, the sync interface is recommended to connect directly not using switches.
I think D
Bond interface - B or D. "same switch" - B "The bond slave interfaces on each Cluster Member must connect to the same switch" https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/html_frameset.htm?topic=documents/R80.30/WebAdminGuides/EN/CP_R80.30_ClusterXL_AdminGuide/198062
it's D, syn interface do not need virtual ip
I think B, but not shure.