Connecting Two Quantum Maestro Orchestrators for Redundancy
Quantum Maestro Getting Started Guide | 91
Item
Description
28
All Security Appliances assigned to the Security Group 2.
29
Security Appliance 2 in the Security Group 1 (
31
).
30
Security Appliance 1 in the Security Group 1 (
31
).
31
All Security Appliances assigned to the Security Group 1.
Table: Explanations (continued)
Notes:
n
Both Quantum Maestro Orchestrators work together (Active / Active).
n
Cables colored red show management traffic flow.
n
Cables colored green (solid lines) show connections to the first Quantum Maestro Orchestrator (
15
).
n
Cables colored blue (dash lines) show connections to the second Quantum Maestro Orchestrator
(
16
).
n
When you assign a Security Appliance to a Security Group, the Quantum Maestro Orchestrators
determine the applicable Downlink ports automatically.
n
The Quantum Maestro Orchestrators create Link Aggregation for the applicable Downlink ports
automatically.
n
Security Group 1 contains:
l
Applicable Uplink ports, to which the cables
10
and
11
are connected.
l
Security Appliances
30
and
29
.
l
Applicable management port (or split interface), to which the Management Server
7
is
connected.
n
Security Group 2 contains:
l
Applicable Uplink ports, to which the cables
12
and
13
are connected.
l
Security Appliances
27
and
26
.
l
Applicable management port (or split interface), to which the Management Server
7
is
connected.
Important:
n
See the
Release Notes for your version
for the list of the required Check Point
cards on the Security Appliances.
n
You must connect the same number of cables from each Quantum Maestro
Orchestrator to all Security Appliances in the same Security Group.
Otherwise, the Quantum Maestro Orchestrators are not able to distribute the
traffic equally between the Security Appliances in the same Security Group.
n
It is possible to connect a maximum of two Downlink ports from each Quantum
Maestro Orchestrator to each Security Appliance.