Check Point QUANTUM MAESTRO Manual
  1. Manuals
  2. Brands
  3. Check Point Manuals
  4. Network Hardware
  5. QUANTUM MAESTRO
  6. Manual
Check Point QUANTUM MAESTRO Manual

Check Point QUANTUM MAESTRO Manual

Hide thumbs
Table of Contents

Advertisement

Quick Links

11 November 2021
QUANTUM MAESTRO
Getting Started Guide

Advertisement

Table of Contents
loading
Need help?

Need help?

Do you have a question about the QUANTUM MAESTRO and is the answer not in the manual?

Questions and answers

Related Manuals for Check Point QUANTUM MAESTRO

Summary of Contents for Check Point QUANTUM MAESTRO

  • Page 1 11 November 2021 QUANTUM MAESTRO Getting Started Guide...
  • Page 2 Check Point. While every precaution has been taken in the preparation of this book, Check Point assumes no responsibility for errors or omissions. This publication and features described herein are subject to change without notice.
  • Page 3 Web browser. Download the latest version of this document in PDF format. Feedback Check Point is engaged in a continuous effort to improve its documentation. Please help us by sending your comments. Quantum Maestro Getting Started Guide   |   3...
  • Page 4 Revision History Date Description 11 November Updated: 2021 "Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack" on page 68 - updated the rack depth range "MHO-140 Specifications" on page 182 - updated the max power consumption 22 June 2021 Added:...
  • Page 5 Description 10 July 2019 Updated: Document design "MGMT Ports" on page 45 "Connecting Two Quantum Maestro Orchestrators for Redundancy" on page 87 "Splitting the Ports with Breakout Cables" on page 82 "MHO-170 Specifications" on page 181 "MHO-140 Specifications" on page 182 01 July 2019 Added (this information was moved from the...

  • Page 6: Table Of Contents

    Replacing Power Supply Units Replacing Fan Units Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack Connecting Cables to Quantum Maestro Orchestrators Single Site Splitting the Ports with Breakout Cables...
  • Page 7 Connecting to the Downlink Ports with DAC or Fiber Cables Dual Site Dual Site with Direct Connection Dual Site with two Switches Dual Site with four Switches Quantum Maestro Orchestrator Ports and Gaia OS Interfaces Additional Information MHO-175 Specifications MHO-170 Specifications MHO-140 Specifications...
  • Page 8 Table of Contents MHO-170 and MHO-140 What is the Next Step? Quantum Maestro Getting Started Guide   |   8...

  • Page 9: Glossary

    Interfaces on the Maestro Hyperscale Orchestrator used to connect to Check Point Security Appliances. You use DAC cables, Fiber cables (with transceivers), or Breakout cables to connect between the Downlink ports and Security Appliances. The Check Point Management traffic (policy, logs, synchronization, and so on) co-exists with the data (user) traffic on the Downlink ports.
  • Page 10 Glossary Gaia gClish The name of the command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Maestro Hyperscale Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group.
  • Page 11 Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Maestro Hyperscale Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected. Security Appliance. Part of the Security Group that contains the assigned Security Appliances.
  • Page 12 Interfaces on the Maestro Hyperscale Orchestrator used to connect to external and internal networks. Gaia Operating System shows these interfaces in Gaia Portal and in Gaia Clish. SmartConsole shows these interfaces in the corresponding SMO Security Gateway object. Quantum Maestro Getting Started Guide   |   12...

  • Page 13: Safety Warnings

    In case of an empty power supply bay, do not operate this equipment with the blank cover removed, or not properly fastened. Double Pole/Neutral Fusing This Quantum Maestro Orchestrator has double pole/neutral fusing. Remove all power cords before you open the cover of this product or touch any internal parts. Quantum Maestro Getting Started Guide   |   13...
  • Page 14 Rack Mounting and Servicing When this product is mounted or serviced in a rack, you must take special precautions to ensure that the Quantum Maestro Orchestrator remains stable. In general, fill the rack with equipment from the bottom to the top.
  • Page 15 Dispose of this product and all of its parts in a responsible and environmentally friendly way. Country of Norway Power Restrictions This unit is intended for connection to a TN power system and an IT power system of Norway only. Quantum Maestro Getting Started Guide   |   15...

  • Page 16: Introduction

    The ports allow a variety of blocking ratios that suit all application requirements. Quantum Maestro Orchestrator 1U systems enable the use of 1, 10, 40 and 100 GbE port speeds in a large scale without the need to change power infrastructure facilities.

  • Page 17: Shipping Carton Contents

    Notes: DB9 connectors are also known as DE9 connectors. Before installing your new Quantum Maestro Orchestrator, unpack it and check the parts list to make sure that all the parts are in the package. Check the parts for visible damage that may have occurred during shipping.

  • Page 18: Features

    MHO-175 - 42 MB MHO-170 - 16 MB MHO-140 - 16 MB Lowest power, under 5 W per 100 GbE port Enhanced scalability 1+1 hot-swappable power supplies 4 N+1 hot-swap fans Color coded PSUs and fans Quantum Maestro Getting Started Guide   |   18...

  • Page 19: Speed And Throughput

    48 SFP+ 8 QSFP28 (use QSFP to SFP breakout cables) Quantum Maestro Orchestrator supports different interfaces and speed rates when you use QSFP to SFP adapters, or hybrid cables. For more information, see "Splitting the Ports with Breakout Cables" on page 82...

  • Page 20: Hardware Components

    Hardware Components Hardware Components This section provides a description of hardware components of Quantum Maestro Orchestrators. Port Mapping for the Quantum Maestro Orchestrator MHO-175 Legend Item Description Item Description Port 1 is the Management port for Management port (Mgmt1) for the...
  • Page 21 Description Item Description System Health LEDs Port LEDs that show the status of all ports (including the split ports) Port Mapping for the Quantum Maestro Orchestrator MHO-170 Legend Item Description Item Description Ports 1 - 2 are the Management port for...
  • Page 22 Hardware Components Port Mapping for the Quantum Maestro Orchestrator MHO-140 Legend Item Description Item Description Ports 1 - 4 are the Management Port 48 is the Synchronization port port for Security Groups on the same Site (lead to the Check Point...

  • Page 23: Mho-175 Front Panel

    To these ports you connect your Check Point Security Appliances. You use DAC or Fiber cables (with transceivers). Synchronization port 31 (colored yellow). You connect a DAC cable between ports 31 on two Quantum Maestro Orchestrators MHO-175 for redundancy between different sites. "USB Port" on page 47 Micro USB 2.0 port.
  • Page 24 To this port you connect a client, from which you configure the Gaia Operating System on the Quantum Maestro Orchestrator (in Gaia Clish). Synchronization port 32 (colored purple). You connect a DAC cable between ports 32 on two Quantum Maestro Orchestrators MHO-175 for redundancy on the same site. "MHO-175 Splitting Button to select indication states for the splitting control LEDs.

  • Page 25: Mho-175 Rear Panel

    First Power Supply Unit. See Fan Units 1, 2, 3, 4, 5, and 6 (from left to right). See "Replacing Fan Units" on page 52 Second Power Supply Unit. See "Replacing Power Supply Units" on page 50 Quantum Maestro Getting Started Guide   |   25...

  • Page 26: Mho-170 Front Panel

    Important - This section describes the default configuration. It is possible to change the port type (Management, Uplink, and Downlink) in the Gaia Operating System on the Quantum Maestro Orchestrator. See the Maestro Administration Guide for your version > Chapter Configuring Security Groups > Section Configuration Procedure >...
  • Page 27 MHO-170 Front Panel Item Description Synchronization port 32 (colored purple). You connect a DAC cable between ports 32 on two Quantum Maestro Orchestrators MHO-170 for redundancy on the same site. RJ45 port with the label CONSOLE. See "Console Port" on page 48 To this port you connect a client, from which you configure the Gaia Operating System on the Quantum Maestro Orchestrator (in Gaia Clish).

  • Page 28: Rear Panel

    First Power Supply Unit. See "Replacing Power Supply Units" on page 50 Fan Units 1, 2, 3 and 4 (from left to right). See "Replacing Fan Units" on page 52 Second Power Supply Unit. See "Replacing Power Supply Units" on page 50 Quantum Maestro Getting Started Guide   |   28...

  • Page 29: Mho-140 Front Panel

    LEDs that show the state of the split interfaces when you connect with Breakout cables to the 40 / 100 GbE Uplink ports (5). Synchronization port 48 (colored purple). You connect a DAC cable between ports 48 on two Quantum Maestro Orchestrators MHO-140 for redundancy on the same site. Notes: It is possible to connect DAC or Fiber cable (with transceivers) to each port (from 1 to 56).

  • Page 30: Rear Panel

    Maestro Orchestrator (Gaia Portal and Gaia Clish). RJ45 port labeled 1, through which it is also possible to configure the Gaia Operating System on the Quantum Maestro Orchestrator (Gaia Portal and Gaia Clish). Reset button labeled R. See "Reset Button" on page 49 RJ45 port with the label CONSOLE.

  • Page 31: Leds

    The LEDs are an important tool for hardware event notification and troubleshooting. Symbol LED Name Instructions Normal Condition "System Status Shows the health of the Quantum Maestro Steady green or LED" on the next Orchestrator. flashing green page during boot.

  • Page 32: System Status Led

    Orchestrator Model On the front panel On the rear panel MHO-175 N / A MHO-170 N / A MHO-140 Note - On MHO-140, this LED is located on the front panel and the rear panel. Quantum Maestro Getting Started Guide   |   32...
  • Page 33 Check Point Support the Orchestrator and contact Flashing for Software did not boot properly, Connect to the Orchestrator through the console more than and only firmware is running. port and check the software status. five minutes Quantum Maestro Getting Started Guide   |   33...

  • Page 34: Fan Status Led

    Action Required Steady green All fans are up and running normally. None. Steady red or Error. One or more fan units are not operating Replace the faulty fan amber properly. units. The Orchestrator boots. None. Quantum Maestro Getting Started Guide   |   34...
  • Page 35 Replace the faulty fan amber properly. unit. The Orchestrator boots. None. Important - With the fan unit removed, power pins are accessible within the module cavity. Do not insert tools or body parts into the fan unit cavity. Quantum Maestro Getting Started Guide   |   35...

  • Page 36: Power Supply Unit Status Leds

    The Power Supply Units LED on the front panel shows the health of the Power Supply Units. To provide power redundancy, there are two power supply inlets in Quantum Maestro Orchestrators. A Quantum Maestro Orchestrator can operate with only one PSU connected.
  • Page 37 Each PSU has one LED of its own. Power Supply Unit LED - Rear Panel in MHO-175 Power Supply Unit LED - Rear Panel in MHO-170 Power Supply Unit LED - Rear Panel in MHO-140 Quantum Maestro Getting Started Guide   |   37...
  • Page 38 No input AC power at all PSUs. Make sure there is the AC power. Plug in the AC cords. If the AC power is OK, Check Point contact Support Quantum Maestro Getting Started Guide   |   38...

  • Page 39: Bad Port Led

    You can connect 1-to-4 breakout cables to physical ports and get a maximum of 128 ports. Item Description Button to select the LED indication mode. LEDs that show the selected LED indication mode. LEDs that show the port states. Quantum Maestro Getting Started Guide   |   39...
  • Page 40 Port 1/8/1 eth1-30 Port 1/8/2 eth1-31 Port 1/8/3 eth1-32 Port 1/8/4 Note - For more information about the ports and interface names in Gaia, see "Quantum Maestro Orchestrator Ports and Gaia OS Interfaces" on page 170 Quantum Maestro Getting Started Guide   |   40...
  • Page 41 Example: If you connect a breakout cable to port 8 (interface eth1- 29), then in this LED indication mode /4, the port LED 8 shows the state of the interface eth1-32 (Port 1/8/4). Quantum Maestro Getting Started Guide   |   41...
  • Page 42 Link is up in the corresponding split port, and the traffic is None. green flowing in that split port. Flashing A problem with the link in the corresponding split port. Check the cable, and amber replace if needed. Quantum Maestro Getting Started Guide   |   42...
  • Page 43 Steady green Link is up, but there is no traffic. None. Flashing green Link is up, and the traffic is flowing. None. Flashing amber A problem with the link. Check the cable, and replace if needed. Quantum Maestro Getting Started Guide   |   43...
  • Page 44 Steady green Link is up, but there is no traffic. None. Flashing green Link is up, and the traffic is flowing. None. Flashing amber A problem with the link. Check the cable, and replace if needed. Quantum Maestro Getting Started Guide   |   44...

  • Page 45: Ports

    IP address. To change the default IP address: 1. Connect to the Quantum Maestro Orchestrator over the RJ45 console port. 2. Log in to Gaia Clish. 3. Configure the applicable IPv4 settings on the interface Mgmt1.
  • Page 46 Ports Location of the MGMT Port Orchestrator Model On the front panel On the rear panel MHO-175 N / A MHO-170 N / A MHO-140 N / A Quantum Maestro Getting Started Guide   |   46...
  • Page 47 Do not use excessive force, when inserting or removing the USB storage device to and from the connector. Location of the USB Port Orchestrator Model On the front panel On the rear panel MHO-175 N / A MHO-170 N / A MHO-140 N / A Quantum Maestro Getting Started Guide   |   47...
  • Page 48 Ports Console Port The port with the label CONSOLE is an RJ45 console port that provides access to the Gaia OS on the Quantum Maestro Orchestrator. Location of the RS232 (Console) Port Orchestrator Model On the front panel On the rear panel...

  • Page 49: Reset Button

    Reset Button Reset Button To perform a power cycle (cold reboot) of the Quantum Maestro Orchestrator, use a flat object to push the reset button. Do not use a sharp pointed object, such as a needle or a push pin to press the reset button.

  • Page 50: Replacing Power Supply Units

    Replacing Power Supply Units Replacing Power Supply Units Quantum Maestro Orchestrators are equipped with two replaceable Power Supply Units (PSUs). The PSUs in these systems can work in a redundant configuration. It is possible to remove one of the PSUs without the need to bring down the Quantum Maestro Orchestrator.
  • Page 51 Power Supply Unit Status LED (see "Power Supply Unit Status LEDs" on page 36 If either the indicator, or the LED does not light up in green color, repeat the whole procedure to remove the PSU and insert it again. Quantum Maestro Getting Started Guide   |   51...

  • Page 52: Replacing Fan Units

    Replacing Fan Units Replacing Fan Units The Quantum Maestro Orchestrators are equipped with four replaceable fan units. They can fully operate, if one fan unit failed. Important: It is not supported to operate a Quantum Maestro Orchestrator, if two or more fan units failed.

  • Page 53: Mounting The Quantum Maestro Orchestrator Mho-175 In A Rack

    Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack This section provides the information necessary to mount the Quantum Maestro Orchestrator in a rack. Installation and Initialization Installation and initialization of the Quantum Maestro Orchestrator requires attention to the normal mechanical, power, and thermal precautions for rack-mounted equipment.
  • Page 54 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Airflow in MHO-175 The fan units in the Quantum Maestro Orchestrator generate the airflow from the front panel (intake) to the rear panel: Important: All systems in the same rack should be planned with the same airflow direction.
  • Page 55 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Parts in the static rail kit: Legend Item Description 2 x Rack mount rails 2 x Rack mount blades 2 x Rack mount rail ears 8 x M6 standard cage nuts...
  • Page 56 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Before you mount the Quantum Maestro Orchestrator to the rack, plan the way you wish to place it: Pay attention to the airflow within the rack cooling, connector, and cabling options.
  • Page 57 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Installation Option 1 - Attaching the mount rail ears (C) near the rear panel Installation in short racks (43 - 58 cm / 16.9 - 22.8 inches): Important - In short racks, the designated windows in the rack mount rails must align with the ventilation openings on the sides of the Quantum Maestro Orchestrator.
  • Page 58 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Installation in standard racks (58 - 80 cm / 19.6 - 31.5 inches): Quantum Maestro Getting Started Guide   |   58...
  • Page 59 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Installation Option 2 - Attaching the mount rail ears (C) near the front panel Installation in short racks (43 - 58 cm / 16.9 - 22.8 inches): Quantum Maestro Getting Started Guide   |   59...
  • Page 60 8.9 cm (3.5 inches), by optional placement of the Quantum Maestro Orchestrator's rails. If you mount the rack blades as depicted in Installation Option 2 above, it lets you slide the PSUs and Fan Units in and out easier.
  • Page 61 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Step 1: Attaching the Rack Mount Rails Step Instructions Attach the left and right rack mount rails (A) to the left and right sides of the Quantum Maestro Orchestrator. Gently push the pins on the sides through the slider key holes, until the rails lock.
  • Page 62 Install eight cage nuts (D) in the desired 1U slots of the rack. Notes: The red frame on the image denotes the Quantum Maestro Orchestrator inside the rack. Install four cage nuts on each side of the Quantum Maestro Orchestrator.
  • Page 63 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Step 4: Attaching the Rack Mount Blades to the Rack While your installation partner is supporting the Quantum Maestro Orchestrator, perform these steps: Step Instructions Attach the rack mount blades (B) to the back side (FRU side) of the rack at the level of the designated cage nuts.
  • Page 64 Do not tighten the screws yet. Example: Step 6: Tightening the Screws While your installation partner is supporting the Quantum Maestro Orchestrator, tighten the eight Phillips pan-head screws (E) you inserted in the previous steps. To tighten the screws, use a torque of 4.5±0.5 Nm.
  • Page 65 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Step 7: Cable Installation It is possible to insert or remove all network cables while the Quantum Maestro Orchestrator is powered To insert a cable, press the connector into the port receptacle until the connector is firmly seated. The LED indicator, corresponding to each data port, light up when the physical connection is established.
  • Page 66 System Status LED to turn green (see "System Status LED" on page 32 It can take up to five minutes to power on the Quantum Maestro Orchestrator. If after five minutes the System Status LED is lit in red color, unplug the power cords and...
  • Page 67 Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack Step 9: Logging in to the Gaia OS Log in to the Quantum Maestro Orchestrator (Gaia Portal or Command Line) with these default credentials: Username - admin Password - admin See the Quantum Maestro Quick Start Guide in the shipping carton.

  • Page 68: Mounting The Quantum Maestro Orchestrator Mho-140 And Mho-170 In A Rack

    Mounting the Quantum Maestro Orchestrator MHO-140 and MHO- 170 in a Rack This section provides the information necessary to mount the Quantum Maestro Orchestrator in a rack. Installation and Initialization Installation and initialization of the Quantum Maestro Orchestrator requires attention to the normal mechanical, power, and thermal precautions for rack-mounted equipment.
  • Page 69 Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack Airflow in MHO-170 and MHO-140 The fan units in the Quantum Maestro Orchestrator generate the airflow from the front panel (intake) to the rear panel: Important: All systems in the same rack should be planned with the same airflow direction.
  • Page 70 Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack Parts in the static rail kit: Legend Item Description 2 x Rack mount rails 2 x Rack mount blades that slide into the rack mount rails (A) 8 x M6 standard cage nuts, and 8 x M6 standard Phillips pan-head screws...
  • Page 71 Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack Notes: You use the Phillips flat head screws (D) to secure the rack mount rails (A) to the Quantum Maestro Orchestrator. You must use at least two of these screws on each side.
  • Page 72 Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack Before you mount the Quantum Maestro Orchestrator to the rack, plan the way you wish to place it: Pay attention to the airflow within the rack cooling, connector, and cabling options.
  • Page 73 Install eight cage nuts (C) in the desired 1U slots of the rack. Notes: The red frame on the image denotes the Quantum Maestro Orchestrator inside the rack. Install four cage nuts on each side of the Quantum Maestro Orchestrator.
  • Page 74 Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack Step 2: Attaching the Rack Mount Rails Step Instructions Attach the left and right rack mount rails (A) to the left and right sides of the Quantum Maestro Orchestrator.
  • Page 75 Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack Step 3: Attaching the Rack Mount Rails to the Rack While your installation partner is supporting the Quantum Maestro Orchestrator, perform these steps: Step Instructions Mount the Quantum Maestro Orchestrator into the rack enclosure.
  • Page 76 Do not tighten the screws yet. Example: Step 5: Tightening the Screws While your installation partner is supporting the Quantum Maestro Orchestrator, tighten the eight Phillips pan-head screws (C) you inserted in the previous steps. To tighten the screws, use a torque of 4.5±0.5 Nm.
  • Page 77 Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack Step 6: Cable Installation It is possible to insert or remove all network cables while the Quantum Maestro Orchestrator is powered To insert a cable, press the connector into the port receptacle until the connector is firmly seated. The LED indicator, corresponding to each data port, light up when the physical connection is established.
  • Page 78 Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack MHO-140 Cable Orientation Quantum Maestro Getting Started Guide   |   78...
  • Page 79 System Status LED to turn green (see "System Status LED" on page 32 It can take up to five minutes to power on the Quantum Maestro Orchestrator. If after five minutes the System Status LED is lit in red color, unplug the power cords and...
  • Page 80 If no obstacles were found, and the problem persists, contact Point Support Step 8: Logging in to the Gaia OS Log in to the Quantum Maestro Orchestrator (Gaia Portal or Command Line) with these default credentials: Username - admin Password - admin See the Quantum Maestro Quick Start Guide in the shipping carton.

  • Page 81: Connecting Cables To Quantum Maestro Orchestrators

    Connecting Cables to Quantum Maestro Orchestrators Connecting Cables to Quantum Maestro Orchestrators This section describes how to connect cables to Quantum Maestro Orchestrators. It is possible to deploy Quantum Maestro Orchestrators in these ways: On a single site (see "Single Site" on page 82 On two different sites (see "Dual Site"...

  • Page 82: Single Site

    Single Site Single Site This section describes how to connect cables to Quantum Maestro Orchestrators on the same site. Splitting the Ports with Breakout Cables In This Section: Breakout Cables MHO-175 Splitting Options MHO-170 Splitting Options MHO-140 Splitting Options Breakout Cables With a breakout cable, it is possible to split one 100 / 40 GbE port into four 10 GbE ports.

  • Page 83: Mho-175 Splitting Options

    Port 1/8/1 eth1-30 Port 1/8/2 eth1-31 Port 1/8/3 eth1-32 Port 1/8/4 "Quantum Maestro Note - For more information about the ports and interface names in Gaia, see Orchestrator Ports and Gaia OS Interfaces" on page 170 Quantum Maestro Getting Started Guide   |   83...
  • Page 84 Example: If you connect a breakout cable to port 8 (interface eth1- 29), then in this LED indication mode /4, the port LED 8 shows the state of the interface eth1-32 (Port 1/8/4). Quantum Maestro Getting Started Guide   |   84...

  • Page 85: Splitting Options

    Port 1/15/1 eth1-30 Port 1/15/2 eth1-31 Port 1/15/3 eth1-32 Port 1/15/4 Note - For more information about the ports and interface names in Gaia, see "Quantum Maestro Orchestrator Ports and Gaia OS Interfaces" on page 170 Quantum Maestro Getting Started Guide   |   85...

  • Page 86: Splitting Options

    Port 1/49/1 eth1-50 Port 1/49/2 eth1-51 Port 1/49/3 eth1-52 Port 1/49/4 "Quantum Maestro Note - For more information about the ports and interface names in Gaia, see Orchestrator Ports and Gaia OS Interfaces" on page 170 Quantum Maestro Getting Started Guide   |   86...

  • Page 87: Connecting Two Quantum Maestro Orchestrators For Redundancy

    Connecting Two Quantum Maestro Orchestrators for Redundancy In This Section: Diagram Workflow This section describes the connection of two Quantum Maestro Orchestrators for Redundancy on the same site. Diagram Important: It is possible to connect only two Quantum Maestro Orchestrators of the same model (see MBS-5038).
  • Page 88 Connecting Two Quantum Maestro Orchestrators for Redundancy Example: Quantum Maestro Getting Started Guide   |   88...
  • Page 89 A DAC cable, Fiber cable (with transceivers), or Breakout cable that connects a first slave of the first Bond (4) on the Networking Device (3) to the first Quantum Maestro Orchestrator (15). A DAC cable, Fiber cable (with transceivers), or Breakout cable that connects a second slave of the first Bond (4) on the Networking Device (3) to the second Quantum Maestro Orchestrator (16).
  • Page 90 Connects Network 1 and Network 2 to the Security Appliances (26, 27, 29, and 30). Distributes the traffic between the Security Appliances in the Security Groups. A DAC that connects the dedicated Synchronization ports on the Quantum Maestro Orchestrators and 16).
  • Page 91 Both Quantum Maestro Orchestrators work together (Active / Active). Cables colored red show management traffic flow. Cables colored green (solid lines) show connections to the first Quantum Maestro Orchestrator (15). Cables colored blue (dash lines) show connections to the second Quantum Maestro Orchestrator (16).
  • Page 92 Dual Port Card to a Downlink port on the second Quantum Maestro Orchestrator (B). Connecting cables between each Quantum Maestro Orchestrator and 1 out of 4 ports on the Quad Port Card on each Security Appliance Illustration Instructions...
  • Page 93 Connecting Two Quantum Maestro Orchestrators for Redundancy Connecting cables between each Quantum Maestro Orchestrator and 2 out of 4 ports on the Quad Port Card on each Security Appliance Illustration Instructions Important - In R80.20SP, this connection method is supported only with the R80.20SP Jumbo Hotfix...

  • Page 94: Workflow

    Networking 1. Configure a first Bond interface (4) on two slave ports. Device (3) This Bond interface connects Network 1 to the Quantum Maestro Orchestrators. Configure the applicable settings, so that the traffic from and to Network 1 passes only on this Bond interface.
  • Page 95 Appliance" on page 92 On both Connect a DAC cable (17) between the dedicated synchronization port (in Quantum our example, Port 32) on the first Quantum Maestro Orchestrator (15) and Maestro the dedicated synchronization port (in our example, Port 32) on the Orchestrators second Quantum Maestro Orchestrator (16).
  • Page 96 Connecting Two Quantum Maestro Orchestrators for Redundancy Table: Workflow (continued) Step Device Instructions On the first With cable (9), connect the Management Server to the Management port Quantum (in our example, Port 1). Maestro In our example, we used a Breakout cable because we have two Security Orchestrator Groups.
  • Page 97 Table: Workflow (continued) Step Device Instructions One of the two Perform these steps: Quantum 1. Connect to the Gaia Operating System on the Quantum Maestro Maestro Orchestrator. Orchestrators You connect through a dedicated port: or 16) In MHO-175 and MHO-170 - the...

  • Page 98: Connecting To The Management Port With Dac Or Fiber Cables

    The different diagrams below show connections to different ports on the Quantum Maestro Orchestrators. It is possible to connect to the Quantum Maestro Orchestrator ports with a DAC cable, Fiber cable (with transceivers), or Breakout cable. The sections below provide a high-level description.

  • Page 99: Connecting Cables To Mho-175

    Note - You assign this Management port to the applicable Security Groups. Shared Management feature allows to assign the same Management port (interface ethX- MgmtY) on a Quantum Maestro Orchestrator to different Security Groups. The assigned Management port has a different IP address and a different MAC address in each Security Group, to which this port is assigned.

  • Page 100: Connecting To The Management Port With Breakout Cables

    Connecting Cables to MHO-175 Connecting to the Management Port with Breakout Cables Important - When you connect two Quantum Maestro Orchestrators for redundancy, the Check Point Management Server connects only to one of the Quantum Maestro Orchestrators. Example: Explanations: Item Description Layer 2 switch.

  • Page 101: Connecting To The Uplink Ports With Dac Or Fiber Cables

    Connecting Cables to MHO-175 Connecting to the Uplink Ports with DAC or Fiber Cables Example of a connection to default Uplink ports 2 to 16: Quantum Maestro Getting Started Guide   |   101...
  • Page 102 Networking Device (router or switch) that connects your Network 1 and Network 2 to the Quantum Maestro Orchestrators and 12) with Bond interfaces (Link Aggregation). Bond interface that connects Network 1 to the Quantum Maestro Orchestrators and 12). This Bond interface provides a redundant Uplink connection for the traffic inspected by the Security Appliances in the applicable Security Group (31).
  • Page 103 Connecting Cables to MHO-175 Notes: Cables colored green (solid lines) show connections to the first Quantum Maestro Orchestrator (10). Cables colored blue (dash lines) show connections to the second Quantum Maestro Orchestrator (12). You assign the Uplink ports to the applicable Security Groups.

  • Page 104: Connecting To The Uplink Ports With Breakout Cables

    Connecting Cables to MHO-175 Connecting to the Uplink Ports with Breakout Cables Example: Quantum Maestro Getting Started Guide   |   104...
  • Page 105 Groups between the Quantum Maestro Orchestrators. Second Quantum Maestro Orchestrator. Notes: Cables colored green (solid lines) show connections to the first Quantum Maestro Orchestrator (10). Cables colored blue (dash lines) show connections to the second Quantum Maestro Orchestrator (12). You assign the Uplink interfaces to the applicable Security Groups.

  • Page 106: Connecting To The Downlink Ports With Dac Or Fiber Cables

    Connecting Cables to MHO-175 Connecting to the Downlink Ports with DAC or Fiber Cables Example of a connection to default Downlink ports 17 to 30: Quantum Maestro Getting Started Guide   |   106...
  • Page 107 A DAC cable or Fiber cable (with transceivers) connected to a Downlink port (in our example, Port 20) on the first Quantum Maestro Orchestrator (1) and to the applicable port on the Expansion Line Card on the Security Appliance 16.
  • Page 108 "Connecting cables between each Quantum Maestro Orchestrator and ports on the Dual Port Card on each Security Appliance" on page 92 "Connecting cables between each Quantum Maestro Orchestrator and 1 out of 4 ports on the Quad Port Card on each Security Appliance" on page 92...

  • Page 109: Connecting To The Management Ports With Dac Or Fiber Cables

    The different diagrams below show connections to different ports on the Quantum Maestro Orchestrators. It is possible to connect to the Quantum Maestro Orchestrator ports with a DAC cable, Fiber cable (with transceivers), or Breakout cable. The sections below provide a high-level description.

  • Page 110: Connecting Cables To Mho-170

    Note - You assign this Management port to the applicable Security Groups. Shared Management feature allows to assign the same Management port (interface ethX- MgmtY) on a Quantum Maestro Orchestrator to different Security Groups. The assigned Management port has a different IP address and a different MAC address in each Security Group, to which this port is assigned.

  • Page 111: Connecting To The Management Ports With Breakout Cables

    Important: When you connect two Quantum Maestro Orchestrators for redundancy, the Check Point Management Server connects only to one of the Quantum Maestro Orchestrators. It is possible to connect breakout cables only to the top odd ports 1 to 29. When the top ports are in a split mode, the bottom even ports 2 to 30 are disabled.

  • Page 112: Connecting To The Uplink Ports With Dac Or Fiber Cables

    Connecting Cables to MHO-170 Connecting to the Uplink Ports with DAC or Fiber Cables Example of a connection to default Uplink ports 3 to 16: Quantum Maestro Getting Started Guide   |   112...
  • Page 113 Networking Device (router or switch) that connects your Network 1 and Network 2 to the Quantum Maestro Orchestrators and 12) with Bond interfaces (Link Aggregation). Bond interface that connects Network 1 to the Quantum Maestro Orchestrators and 12). This Bond interface provides a redundant Uplink connection for the traffic inspected by the Security Appliances in the applicable Security Group (31).
  • Page 114 Connecting Cables to MHO-170 Notes: Cables colored green (solid lines) show connections to the first Quantum Maestro Orchestrator (10). Cables colored blue (dash lines) show connections to the second Quantum Maestro Orchestrator (12). You assign the Uplink ports to the applicable Security Groups.

  • Page 115: Connecting To The Uplink Ports With Breakout Cables

    Connecting to the Uplink Ports with Breakout Cables Important - It is possible to connect breakout cables only to the top ports. When the specific top ports are in a split mode, the corresponding bottom ports are disabled. Example: Quantum Maestro Getting Started Guide   |   115...
  • Page 116 Networking Device (router or switch) that connects your Network 1 and Network 2 to the Quantum Maestro Orchestrators and 8) with Bond interfaces (Link Aggregation). Bond interface that connects Network 1 to the Quantum Maestro Orchestrators and 10). This Bond interface provides a redundant Uplink connection for the traffic inspected by the Security Appliances in the applicable Security Group (31).
  • Page 117 Connecting Cables to MHO-170 Notes: Cables colored green (solid lines) show connections to the first Quantum Maestro Orchestrator (10). Cables colored blue (dash lines) show connections to the second Quantum Maestro Orchestrator (12). You assign the Uplink interfaces to the applicable Security Groups.

  • Page 118: Connecting To The Downlink Ports With Dac Or Fiber Cables

    Connecting Cables to MHO-170 Connecting to the Downlink Ports with DAC or Fiber Cables Example of a connection to default Downlink ports 17 to 30: Quantum Maestro Getting Started Guide   |   118...
  • Page 119 A DAC cable or Fiber cable (with transceivers) connected to a Downlink port (in our example, Port 20) on the first Quantum Maestro Orchestrator (1) and to the applicable port on the Expansion Line Card on the Security Appliance 16.
  • Page 120 "Connecting cables between each Quantum Maestro Orchestrator and ports on the Dual Port Card on each Security Appliance" on page 92 "Connecting cables between each Quantum Maestro Orchestrator and 1 out of 4 ports on the Quad Port Card on each Security Appliance" on page 92...

  • Page 121: Connecting To The Management Ports With Dac Or Fiber Cables

    The different diagrams below show connections to different ports on the Quantum Maestro Orchestrators. It is possible to connect to the Quantum Maestro Orchestrator ports with a DAC cable, Fiber cable (with transceivers), or Breakout cable. The sections below provide a high-level description.

  • Page 122: Connecting Cables To Mho-140

    Note - You assign this Management port to the applicable Security Groups. Shared Management feature allows to assign the same Management port (interface ethX- MgmtY) on a Quantum Maestro Orchestrator to different Security Groups. The assigned Management port has a different IP address and a different MAC address in each Security Group, to which this port is assigned.

  • Page 123: Connecting To The Uplink Ports With Dac Or Fiber Cables

    Connecting Cables to MHO-140 Connecting to the Uplink Ports with DAC or Fiber Cables Example of a connection to default Uplink ports 5 to 26: Example of a connection to default Uplink ports 49 to 56: Quantum Maestro Getting Started Guide   |   123...
  • Page 124 Description Production network 1 that communicates with production network 2 (5) through a Security Group configured on the Quantum Maestro Orchestrator. Layer 2 switch. A DAC or Fiber cable (with transceivers) connected to an Uplink port (in our example, Ports 7 and 49).

  • Page 125: Connecting To The Uplink Ports With Breakout Cables

    Important - It is possible to connect breakout cables only to the top ports 49, 51, 53, and 55. When the specific top ports are in a split mode, the corresponding bottom ports are disabled. Example: Quantum Maestro Getting Started Guide   |   125...
  • Page 126 Networking Device (router or switch) that connects your Network 1 and Network 2 to the Quantum Maestro Orchestrators and 8) with Bond interfaces (Link Aggregation). Bond interface that connects Network 1 to the Quantum Maestro Orchestrators and 10). This Bond interface provides a redundant Uplink connection for the traffic inspected by the Security Appliances in the applicable Security Group (31).
  • Page 127 Connecting Cables to MHO-140 Notes: Cables colored green (solid lines) show connections to the first Quantum Maestro Orchestrator (10). Cables colored blue (dash lines) show connections to the second Quantum Maestro Orchestrator (12). It is possible to configure some of the Downlink ports as additional Uplink ports.

  • Page 128: Connecting To The Downlink Ports With Dac Or Fiber Cables

    Connecting Cables to MHO-140 Connecting to the Downlink Ports with DAC or Fiber Cables Example of a connection to default Downlink ports 27 to 47: Quantum Maestro Getting Started Guide   |   128...
  • Page 129 A DAC cable or Fiber cable (with transceivers) connected to a Downlink port (in our example, Port 30) on the first Quantum Maestro Orchestrator (1) and to the applicable port on the Expansion Line Card on the Security Appliance 16.
  • Page 130 "Connecting cables between each Quantum Maestro Orchestrator and ports on the Dual Port Card on each Security Appliance" on page 92 "Connecting cables between each Quantum Maestro Orchestrator and 1 out of 4 ports on the Quad Port Card on each Security Appliance" on page 92...

  • Page 131: Dual Site

    Dual Site This section describes the deployment of Quantum Maestro Orchestrators on two different physical sites. It is possible to deploy two Quantum Maestro Orchestrators on each physical site and connect the sites to each other. The sites synchronize both connections and configuration.

  • Page 132: Dual Site With Direct Connection

    1. On each site, two Quantum Maestro Orchestrators are connected for redundancy: On each site, Port 48 on Quantum Maestro Orchestrators is for the internal synchronization. On each site, Port 47 on Quantum Maestro Orchestrators is for the external synchronization between sites.
  • Page 133 Item Description DAC cables, Fiber cables (with transceivers), or Breakout cables that connect Downlink ports on the first Quantum Maestro Orchestrator (3) on the first site to the Security Appliance (17, and 22) on the first site. These cables connect to the odd port of an Expansion Line Card on Security Appliances.
  • Page 134 Item Description DAC cables, Fiber cables (with transceivers), or Breakout cables that connect Downlink ports on the second Quantum Maestro Orchestrator (11) on the first site to the Security and 22) on the first site. Appliance (17, These cables connect to the even port of an Expansion Line Card on Security Appliances.
  • Page 135 (denoted as MHO 1_2) IP 192.0.2.2 IP 203.0.113.2 Orchestrator ID 2_1 Port 48 Port 47 (denoted as MHO 2_1) IP 192.0.2.15 IP 203.0.113.15 Orchestrator ID 2_2 Port 48 Port 47 (denoted as MHO 2_2) IP 192.0.2.16 IP 203.0.113.16 Quantum Maestro Getting Started Guide   |   135...
  • Page 136 The dedicated internal synchronization ports on the Quantum Maestro Orchestrators. The Security Appliances and the Downlink ports on the Quantum Maestro Orchestrators. The production traffic networks and the Uplink ports on the Quantum Maestro Orchestrators. Follow: "Connecting Two Quantum Maestro Orchestrators for Redundancy" on page 87 "Connecting Cables to MHO-175"...
  • Page 137 You must connect fiber cables between ports with the same numbers on the Quantum Maestro Orchestrators on each site. Connect fiber cables between these pairs of Quantum Maestro Orchestrators: 1. The first Orchestrator on the first site (Orchestrator ID 1_1).
  • Page 138 Configuration Procedure > Section Configuring Security Groups in Gaia Clish > Section Configuring the Port Settings . Restart the orchd daemon On the Quantum Maestro Orchestrators, log in to the Expert mode and run this command: orchd restart Warning - No traffic flows through the Quantum Maestro Orchestrator until this daemon restarts.
  • Page 139 Warning - No traffic flows through the Quantum Maestro Orchestrator until this daemon restarts. Follow these configuration steps: a. Configure the applicable Security Groups on the Quantum Maestro Orchestrators. b. Configure the Gaia Operating System settings in the new Security Group. c. Configure the settings in SmartConsole.
  • Page 140 Connect to the command line of the Security Group over SSH at <IP Address of Security Group>. When you log in, the Gaia gClish opens by default. Important - This connection goes through the Quantum Maestro Orchestrator's management interface you assigned to this Security Group.
  • Page 141 Dual Site with Direct Connection Step Instructions On the new site, install the Quantum Maestro Orchestrators in their racks. Follow the applicable instructions: "Mounting the Quantum Maestro Orchestrator MHO-175 in a Rack" on page 53 "Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack"...
  • Page 142 Log in to the Expert mode and run this command: orchd restart Warning - No traffic flows through the Quantum Maestro Orchestrator until this daemon restarts. Make sure the date and time are the same on all Quantum Maestro Orchestrators on both sites. Quantum Maestro Getting Started Guide   |   142...
  • Page 143 On the new site (Site ID 2), configure the dedicated ports for the external synchronization on the Quantum Maestro Orchestrators (Orchestrator ID 2_1 and Orchestrator ID 2_2). Warning - You must perform this step on the Quantum Maestro Orchestrators on the new site before you perform this step on the Quantum Maestro Orchestrators on the existing site.
  • Page 144 Warning - No traffic flows through the Quantum Maestro Orchestrator until this daemon restarts. On the new site (Site ID 2), restart the orchd daemon on each Quantum Maestro Orchestrator (Orchestrator ID 2_1 and Orchestrator ID 2_2). This forces the new site to synchronize the applicable configuration from the existing site.
  • Page 145 For information, see the Maestro Administration Guide for your version > Chapter Configuring Security Groups > Section Configuration Procedure > Section Configuring Security Groups in Gaia Portal . a. With a web browser, connect to the Gaia Portal on the Quantum Maestro Orchestrator: https://<IP Address of Orchestrator's MGMT Port>...

  • Page 146: Dual Site With Two Switches

    On each site, Port 47 on Quantum Maestro Orchestrators is for the external synchronization between sites. This Port 47 on Quantum Maestro Orchestrators connects to the Layer 2 Switch on the site. On each site, each Security Appliance has an Expansion Line Card.
  • Page 147 (21) on the second Quantum Maestro Orchestrator (22) on the second site. DAC cables, Fiber cables (with transceivers), or Breakout cables that connect Downlink ports on the first Quantum Maestro Orchestrator (11) on the first site to the Security Appliance (25, and 30) on the first site.
  • Page 148 MHO-140 requires a 10 GbE DAC cable. DAC cables, Fiber cables (with transceivers), or Breakout cables that connect Downlink ports on the second Quantum Maestro Orchestrator (19) on the first site to the Security Appliance (25, and 30) on the first site.
  • Page 149 Table: Explanations (continued) Item Description The dedicated internal synchronization port (Port 48) on the second Quantum Maestro Orchestrator (19) on the first site. This port connects with a DAC cable to the dedicated internal synchronization port (15) on the first Quantum Maestro Orchestrator (11) on the first site.
  • Page 150 (denoted as MHO 1_2) IP 192.0.2.2 IP 203.0.113.2 Orchestrator ID 2_1 Port 48 Port 47 (denoted as MHO 2_1) IP 192.0.2.15 IP 203.0.113.15 Orchestrator ID 2_2 Port 48 Port 47 (denoted as MHO 2_2) IP 192.0.2.16 IP 203.0.113.16 Quantum Maestro Getting Started Guide   |   150...
  • Page 151 If these default Site Sync VLAN IDs conflict with the existing VLAN IDs in your environment, then it is possible to change the Base Site Sync VLAN IDs on Quantum Maestro Orchestrators. 2. Latency between the Layer 2 switches on different sites must be lower than 100ms.
  • Page 152 The dedicated internal synchronization ports on the Quantum Maestro Orchestrators. The Security Appliances and the Downlink ports on the Quantum Maestro Orchestrators. The production traffic networks and the Uplink ports on the Quantum Maestro Orchestrators. Follow: "Connecting Two Quantum Maestro Orchestrators for Redundancy" on page 87 "Connecting Cables to MHO-175"...
  • Page 153 Configuration Procedure > Section Configuring Security Groups in Gaia Clish > Section Configuring the Port Settings . Restart the orchd daemon On the Quantum Maestro Orchestrators, log in to the Expert mode and run this command: orchd restart Warning - No traffic flows through the Quantum Maestro Orchestrator until this daemon restarts.
  • Page 154 Restart the orchd daemon on each Orchestrator. Log in to the Expert mode and run this command: orchd restart Warning - No traffic flows through the Quantum Maestro Orchestrator until this daemon restarts. Configuring the Site ID on the second site a.
  • Page 155 3600 on Orchestrator ID 1_1 and Orchestrator ID 2_1 3601 on Orchestrator ID 1_2 and Orchestrator ID 2_2 If you configure a new Base Site Sync VLAN ID, then Quantum Maestro Orchestrators assign the new Site Sync VLAN IDs in this way:...
  • Page 156 Step Instructions Follow these configuration steps: a. Configure the applicable Security Groups on the Quantum Maestro Orchestrators. b. Configure the Gaia Operating System settings in the new Security Group. c. Configure the settings in SmartConsole. See the Maestro Administration Guide for your version > Chapter Configuring Security Groups .
  • Page 157 Connect to the command line of the Security Group over SSH at <IP Address of Security Group>. When you log in, the Gaia gClish opens by default. Important - This connection goes through the Quantum Maestro Orchestrator's management interface you assigned to this Security Group.

  • Page 158: Dual Site With Four Switches

    On each site, Port 47 on Quantum Maestro Orchestrators is for the external synchronization between sites. This Port 47 on Quantum Maestro Orchestrators connects to the Layer 2 Switches on the site. On each site, each Security Appliance has an Expansion Line Card.
  • Page 159 Dual Site with four Switches Diagram Quantum Maestro Getting Started Guide   |   159...
  • Page 160 The second Layer 2 switch on the second site. DAC cables, Fiber cables (with transceivers), or Breakout cables that connect Downlink ports on the first Quantum Maestro Orchestrator (11) on the first site to the Security and 34) on the first site.
  • Page 161 Item Description DAC cables, Fiber cables (with transceivers), or Breakout cables that connect Downlink ports on the first Quantum Maestro Orchestrator (14) on the second site to the Security and 35) on the second site. Appliance (30, These cables connect to the odd port of an Expansion Line Card on Security Appliances.
  • Page 162 Table: Explanations (continued) Item Description The dedicated external synchronization port (Port 47) on the second Quantum Maestro Orchestrator (26) on the second site. This port connects with a DAC cable or Fiber cable (with transceivers) to the second Layer 2 switch (12 to port 9) on the second site.
  • Page 163 If these default Site Sync VLAN IDs conflict with the existing VLAN IDs in your environment, then it is possible to change the Base Site Sync VLAN IDs on Quantum Maestro Orchestrators. 2. Latency between the Layer 2 switches on different sites must be lower than 100ms.
  • Page 164 The dedicated internal synchronization ports on the Quantum Maestro Orchestrators. The Security Appliances and the Downlink ports on the Quantum Maestro Orchestrators. The production traffic networks and the Uplink ports on the Quantum Maestro Orchestrators. Follow: "Connecting Two Quantum Maestro Orchestrators for Redundancy" on page 87 "Connecting Cables to MHO-175"...
  • Page 165 Configuration Procedure > Section Configuring Security Groups in Gaia Clish > Section Configuring the Port Settings . Restart the orchd daemon On the Quantum Maestro Orchestrators, log in to the Expert mode and run this command: orchd restart Warning - No traffic flows through the Quantum Maestro Orchestrator until this daemon restarts.
  • Page 166 Restart the orchd daemon on each Orchestrator. Log in to the Expert mode and run this command: orchd restart Warning - No traffic flows through the Quantum Maestro Orchestrator until this daemon restarts. Configuring the Site ID on the second site a.
  • Page 167 3600 on Orchestrator ID 1_1 and Orchestrator ID 2_1 3601 on Orchestrator ID 1_2 and Orchestrator ID 2_2 If you configure a new Base Site Sync VLAN ID, then Quantum Maestro Orchestrators assign the new Site Sync VLAN IDs in this way:...
  • Page 168 Step Instructions Follow these configuration steps: a. Configure the applicable Security Groups on the Quantum Maestro Orchestrators. b. Configure the Gaia Operating System settings in the new Security Group. c. Configure the settings in SmartConsole. See the Maestro Administration Guide for your version > Chapter Configuring Security Groups .
  • Page 169 Connect to the command line of the Security Group over SSH at <IP Address of Security Group>. When you log in, the Gaia gClish opens by default. Important - This connection goes through the Quantum Maestro Orchestrator's management interface you assigned to this Security Group.

  • Page 170: Quantum Maestro Orchestrator Ports And Gaia Os Interfaces

    Quantum Maestro Orchestrator Ports and Gaia OS Interfaces The tables below show how the Gaia Operating System on the Quantum Maestro Orchestrator assigns the interface names to the ports on the Quantum Maestro Orchestrator's front panel (the default configuration). Important - The Gaia Operating System on the Quantum Maestro Orchestrator does not let you configure the network settings for the Uplink or Downlink ports.
  • Page 171 Quantum Maestro Orchestrator Ports and Gaia OS Interfaces MHO-175 ports on the front panel and their default names in Gaia First MHO-175 Quantum Maestro Orchestrator Table: First MHO-175 ports and interfaces Port Port Number Interface Port Number Interface Port on the...
  • Page 172 Port 2/16/1 eth2-Sync Port 2/32/1 Notes: When you connect two Quantum Maestro Orchestrators MHO-175 for redundancy, Gaia OS shows: eth1-XX and Port 1/X/X for the first Quantum Maestro Orchestrator. eth2-XX and Port 2/X/X for the second Quantum Maestro Orchestrator. The tables above show the default configuration before you connect breakout cables.
  • Page 173 Quantum Maestro Orchestrator Ports and Gaia OS Interfaces MHO-170 ports on the front panel and their default names in Gaia First MHO-170 Quantum Maestro Orchestrator Table: First MHO-170 ports and interfaces Port Port Number Interface Port Number Interface Port on the...
  • Page 174 Port 2/16/1 eth2-Sync Port 2/32/1 Notes: When you connect two Quantum Maestro Orchestrators MHO-170 for redundancy, Gaia OS shows: eth1-XX and Port 1/X/X for the first Quantum Maestro Orchestrator. eth2-XX and Port 2/X/X for the second Quantum Maestro Orchestrator. The tables above show the default configuration before you connect breakout cables.
  • Page 175 Quantum Maestro Orchestrator Ports and Gaia OS Interfaces MHO-140 ports on the front panel and their default names in Gaia First MHO-140 Quantum Maestro Orchestrator Table: First MHO-140 ports and interfaces Port Port Number Interface Port Number Interface Port on the...
  • Page 176 Quantum Maestro Orchestrator Ports and Gaia OS Interfaces Table: First MHO-140 ports and interfaces (continued) Port Port Number Interface Port Number Interface Port on the Name Name on the Name Name Front in Gaia OS in Gaia OS Front in Gaia OS...
  • Page 177 Quantum Maestro Orchestrator Ports and Gaia OS Interfaces Second MHO-140 Quantum Maestro Orchestrator Table: Second MHO-140 ports and interfaces Port Port Number Interface Port Number Interface Port on the Name Name on the Name Name Front in Gaia OS in Gaia OS...
  • Page 178 Port 2/28/1 eth2-63 Port 2/63/1 Notes: When you connect two Quantum Maestro Orchestrators MHO-140 for redundancy, Gaia OS shows: eth1-XX and Port 1/X/X for the first Quantum Maestro Orchestrator. eth2-XX and Port 2/X/X for the second Quantum Maestro Orchestrator. The tables above show the default configuration before you connect breakout cables.

  • Page 179: Additional Information

    Additional Information Additional Information This section provides some additional information for Quantum Maestro Orchestrators. MHO-175 Specifications Feature Parameter Value Mechanical Dimensions Height - 44 mm (1.72 inches) Width - 428 mm (16.84 inches) Depth - 559 mm (22 inches) Enclosure...
  • Page 180 Additional Information Feature Parameter Value Interface Speeds 40 / 100 GbE for ports 1-32 4x10 GbE for ports 1-32 (see "MHO-175 Splitting Options" on page 83 Throughput 3.2 Tbit/sec Quantum Maestro Getting Started Guide   |   180...

  • Page 181: Mho-170 Specifications

    16 MB Hot-Swap PSU 2 (1+1 redundant) Hot-Swap Fans 4 (N+1 redundant) Interface Speeds 40 / 100 GbE for ports 1-32 4x10 GbE for ports 1-32 (see "MHO-170 Splitting Options" on page 85 Throughput 6.4 Tbit/sec Quantum Maestro Getting Started Guide   |   181...

  • Page 182: Mho-140 Specifications

    2 (1+1 redundant) Hot-Swap Fans 4 (N+1 redundant) Interface Speeds 10 GbE for ports 1-48 100 GbE for ports 49-56 4x10 GbE for ports 49,51,53, and 55 (see "MHO-140 Splitting Options" on page 86 Throughput 4 Tbit/sec Quantum Maestro Getting Started Guide   |   182...

  • Page 183: Thermal Threshold Definitions

    Thermal Threshold Definitions Thermal Threshold Definitions There are three thermal threshold definitions for the Quantum Maestro Orchestrator, which impact the overall operation state: Threshold Temperature Instructions Critical 120°C When the Quantum Maestro Orchestrator crosses this temperature, the firmware automatically shuts down the Quantum Maestro Orchestrator.

  • Page 184: Rj45 To Db9 Harness Pinout

    RJ45 to DB9 Harness Pinout RJ45 to DB9 Harness Pinout To connect a host PC to the Console RJ45 port on the Quantum Maestro Orchestrator, an RS232 harness cable (DB9 to RJ45) is supplied. Quantum Maestro Getting Started Guide   |   184...

  • Page 185: Declaration Of Conformity

    The models of the declaration described above have been tested by Mellanox EMC Laboratory and were found to comply with the requirements set out in the Council Directive on the Approximation of the Laws of the Member States relating to Electromagnetic Compatibility Directive (2014/30/EU) & Low Voltage Directive (LVD) (2014/35/EU): Quantum Maestro Getting Started Guide   |   185...
  • Page 186 UL/‎ C SA ‎ ‎ 6 09‎ ‎ 5 0-‎ ‎ 1 ‎ EN ‎ ‎ 6 23‎ ‎ 6 8-‎ ‎ 1 ‎ IEC‎ 6 23‎ ‎ 6 8-‎ ‎ 1 ‎ Detailed Test Report Number: MLNX23-1091224069-6860 Rev 3.00 Certificate Number: MLNX23-EMCCERT4069-6860 Rev 3.00‎ Quantum Maestro Getting Started Guide   |   186...
  • Page 187 Radio Disturbance Characteristics. Safety CE LVD/ Global Safety Information technology equipment. EN 60950-1:2006 + A2:2013 Electrical Safety requirements, IEC 60950-1:2005 + AMD1:2009 + AMD2:2013 Low Voltage Directive (LVD). Detailed Test Report Number: MLNX23-1091224069-310 Certificate Number: MLNX23-1091224069-1633 Quantum Maestro Getting Started Guide   |   187...
  • Page 188 What is the Next Step? What is the Next Step? See the Maestro Administration Guide on the Home Page SK article for your software version. Quantum Maestro Getting Started Guide   |   188...

This manual is also suitable for:

Quantum maestro mho-175Quantum maestro mho-170Quantum maestro mho-140

Table of Contents