Check Point QUANTUM SPARK 1570 - Defining SmartLSM Cluster Profile

Large-Scale Deployment Installation
R81.10.X Quantum Spark 1500, 1600, 1800, 1900, 2000 Appliances Centrally Managed Administration Guide|57
Defining a SmartLSM Appliance Cluster Profile
The SmartLSM Appliance Cluster Profile is a logical object like the SmartLSM Appliance
Gateway profile. It contains the firewall and policy components but also requires logical
topology configuration.
The topology table in the SmartLSM Cluster Profile is a template for all SmartLSM clusters that
is created with this profile. The SmartLSM Cluster Profile automatically assigns the
configuration settings and security policies to the SmartLSM cluster.
The SmartLSM Cluster Profile and its topology are configured in SmartConsole. Then the
SmartProvisioning GUI is used to connect and manage the appliances by the Security
Management Server.
Before you do the procedure:
n
Prepare two appliances.
n
Configure matching internal interfaces with IP addresses in the same subnet. For
example, if you use LAN1 on one of the appliances, you must use LAN1 on the second
appliance.
n
Prepare the WAN interfaces on the same subnet.
n
Select a random IP address from the WAN and the Internal networks addresses pool to
use as the Cluster Virtual IP.
To create a SmartLSM Cluster profile:
1. Connect with SmartConsole to the Management Server.
2. From the Objects menu, click More object types > LSM Profile > New Small Office
Appliance Cluster.
The SmartLSM Security Profile window opens.
3. In General Properties, enter a Name for the profile (for example, ClusterProfile1).
4. Select the Cluster Members tab and click Add to add the two Cluster Members to the
profile.
5. Select the Topology tab and click Edit to insert a template topology.
For each SmartLSM cluster, you must define at least 3 networks:
n
External: one interface for each Cluster Member and shared virtual IP address
n
Internal: one interface for each Cluster Member and shared virtual IP address