Check Point QUANTUM MAESTRO - Page 151

Dual Site with two Switches
Quantum Maestro Getting Started Guide|151
Requirements
1. Layer 2 switches must support VLAN Q-in-Q Tunneling (encapsulation of 802.1Q VLAN inside
802.1Q VLAN).
You must configure VLAN Trunks and Q-in-Q exactly as described below:
Site Switch Port Port Configuration
1
and
2
SW 1
and
SW 2
1 VLAN Trunk that accepts these VLAN IDs:
n
3600
*
(used for a site internal
synchronization)
n
3951 (used for external
synchronization)
1
and
2
SW 1
and
SW 2
2 VLAN Trunk that accepts these VLAN IDs:
n
3601
*
(used for a site internal
synchronization)
n
3952 (used for external
synchronization)
1
and
2
SW 1
and
SW 2
32 VLAN Trunk that accepts these VLAN IDs:
n
3600
*
(used for a site internal
synchronization)
n
3601
*
(used for a site internal
synchronization)
n
3951 (used for external
synchronization)
n
3952 (used for external
synchronization)
Important:
n
It is not possible to change the VLAN ID 3951 and the VLAN ID 3952.
n
*
The default Site Sync VLAN IDs are:
l
3600 on Orchestrator ID 1_1 and Orchestrator ID 2_1
l
3601 on Orchestrator ID 1_2 and Orchestrator ID 2_2
If these default Site Sync VLAN IDs conflict with the existing VLAN IDs
in your environment, then it is possible to change the Base Site Sync
VLAN IDs on Quantum Maestro Orchestrators.
2. Latency between the Layer 2 switches on different sites must be lower than 100ms.
3. Packet lost between the Layer 2 switches on different sites must be lower than 5%.