Check Point QUANTUM MAESTRO Manual page 151

Requirements
1. Layer 2 switches must support VLAN Q-in-Q Tunneling (encapsulation of 802.1Q VLAN inside
802.1Q VLAN).
You must configure VLAN Trunks and Q-in-Q exactly as described below:
Site Switch
1 SW 1
and and
2 SW 2
1 SW 1
and and
2 SW 2
1 SW 1
and and
2 SW 2
Important:
2. Latency between the Layer 2 switches on different sites must be lower than 100ms.
3. Packet lost between the Layer 2 switches on different sites must be lower than 5%.
Port Port Configuration
1 VLAN Trunk that accepts these VLAN IDs:
2 VLAN Trunk that accepts these VLAN IDs:
32 VLAN Trunk that accepts these VLAN IDs:
n It is not possible to change the VLAN ID 3951 and the VLAN ID 3952.
*
The default Site Sync VLAN IDs are:
n
3600 on Orchestrator ID 1_1 and Orchestrator ID 2_1
l
3601 on Orchestrator ID 1_2 and Orchestrator ID 2_2
l
If these default Site Sync VLAN IDs conflict with the existing VLAN IDs
in your environment, then it is possible to change the Base Site Sync
VLAN IDs on Quantum Maestro Orchestrators.
*
3600 (used for a site internal
n
synchronization)
3951 (used for external
n
synchronization)
*
3601 (used for a site internal
n
synchronization)
3952 (used for external
n
synchronization)
*
3600 (used for a site internal
n
synchronization)
*
3601 (used for a site internal
n
synchronization)
3951 (used for external
n
synchronization)
3952 (used for external
n
synchronization)
Quantum Maestro Getting Started Guide | 151
Dual Site with two Switches