Installation
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 24
To create a SmartLSM Cluster profile:
1.
In SmartDashboard, from Network Objects, right-click
Check Point
>
SmartLSM profile
>
Small Office Appliance Cluster
.
2.
In General Properties, enter a
Name
for the profile (for example, ClusterProfile1).
3.
Select the
Cluster Members
tab and click
Add
to add the two cluster members to the profile.
4.
Select the
Topology
tab and click
Edit
to insert a template topology.
For each SmartLSM cluster, you must define at least 3 networks:
•
External (one interface for each Cluster Member and shared virtual IP address)
•
Internal (one interface for each Cluster Member and shared virtual IP address)
•
Internal - Sync (one interface for each Cluster Member)
The network addresses (for example,
1.1.1.
194) for each interface are not the actual
addresses for your SmartLSM Cluster environment. Those are used for the template. The
actual network addresses are modified in the next configuration step in the SmartProvisioning
application.
Important
-
The host octet for each member's interface address such as "59" for Member1 - WAN (for
example, 1.1.1.
59)
must be its real host address and cannot be modified. Make sure to
configure it correctly.
The host octet for the Virtual IP addresses can be modified later.
5.
For each Virtual IP interface, double-click the text field to enter the interface name, security
zone, network type, IP address, and Net Mask.
6.
For the Internal and Sync interfaces, select
Network defined by the interface IP and Net
Mask.
Set Anti-Spoofing for each interface in the
Anti-Spoofing
tab. Keep the default settings
in the Member Network tab.
7.
For each cluster member, double-click the Topology text field to enter the interface name, IP
address, and Net Mask. For VLANs, make sure the member names use the actual physical
interface names on the machines. Note that these are the same names that are shown in the
appliance’s WebUI, but replace the colon character ":" with a period character "."
For example, if the WebUI shows LAN1:10, enter here LAN1.10
8.
Click
Save
and install policy on the Cluster Profile.
9.
Close SmartDashboard.
10.
Continue in SmartProvisioning (on page
Deploying with SmartProvisioning
You can use SmartProvisioning to manage Check Point Appliance gateways with the SmartLSM
profiles defined in SmartDashboard. Configure these appliances using the First Time
Configuration Wizard or a USB drive configuration file before you manage them with
SmartProvisioning.
For more information about large-scale deployment using SmartProvisioning, see the
SmartProvisioning Administration Guide
.
Содержание L-71
Страница 122: ......
