Posts
Alteon Switched Firewall 6000 Installation - Final
Posted On Oct 31, 2008 at at 5:57 PM by DophiThe installation of NSF is a long way but it's done in this part. The final step of installation is creating a CheckPoint cluster.
1. Create a gateway cluster: Right click on the CheckPoint object and select "New CheckPoint" → "VPN-1 Power/UTM Cluster"
![cluster_thumb[2]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh6CG2FnyvMxb8KWqmPNFtrxTGiZuWLWzs_P5hbBe2Su6aBHBNA7C3gLpst6wCxQWODw2dGeiKXTqbUAA09I91M_wm89P6Yyn9L8bk-9rviL1Laheeao518UkMgPotNuElLTB-obOo0FFhE/s1600-h/cluster_thumb%5B2%5D%5B3%5D.jpg)
2. Setup the name and IP address of cluster: The IP address is the MIP address (10.1.1.5) I created during the initial of NSF. Check "Firewall" and "VPN" and uncheck "ClusterXL". Change OS to Linux.
![clu ip_thumb[1]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi8_malspZ3UUOKn_CxapgeSUFRkI6vF-tXcDukDgpiJ80bohmCOCsGMnNhMuYG2kPWH0jRBXV649x_uvqQb_kAFZMoLuyA4WU5l9twv4ZMRmYJHbWEDWq-ZoRJrRZa_xSKLY0A1bqIEVMz/s1600-h/clu%20ip_thumb%5B1%5D%5B3%5D.jpg)
3. Add Firewall Directors as cluster members: Click on the Cluster Members tab and add gateways.
![add gate to clu_thumb[1]](https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiWLQh0jN22rFs1bzzoFv2xsfM5dGKOiFEHER7qvvloQoHxcVu4k76MrjxkhDJDsX30DVtPyM1vOSLi6zKUWDYgJA8rQLEc5aYHyCtdK6_WTuQ4XzG_5mrGJgOLyAlABomwUxJoMcgy81RC/s1600-h/add%20gate%20to%20clu_thumb%5B1%5D%5B3%5D.jpg)
4. Add gateways as cluster members: Select two gateways to be cluster members.
5. Click on the 3rd Party Configuration tab to specify 3rd party solution: Select "Load Sharing". In the description of official document, High Availability is not supported on NSF 6000 but actually works.
6. Edit the topology for NSF Cluster: Click the Topology tab and edit the topology.
7. Edit the interface IP address and type: Every interfaces should be assigned as "Cluster" in Network Objective except sync interface. The sync interface should be selected as "1st Sync". In addition, manually setup the IP address of each interface.
8. Change the maximum concurrent connections: Similar with the previous step, change the maximum concurrent connections to 500,000.
10. Close the Gateway Cluster Properties and Network Objects windows, click Ok and
close.
10. Install the policy on the cluster: From the SmartDashboard menu bar, select Policy >
Install… and click OK on the Install Policy window.
The basic NSF installation is done.
