Check Point QUANTUM MAESTRO Manual page 163

Configuration of the synchronization ports:
Site Orchestrator
1 Orchestrator ID 1_1
(denoted as MHO 1_1)
1 Orchestrator ID 1_2
(denoted as MHO 1_2)
2 Orchestrator ID 2_1
(denoted as MHO 2_1)
2 Orchestrator ID 2_2
(denoted as MHO 2_2)
Requirements
1. Layer 2 switches must support VLAN Q-in-Q Tunneling (encapsulation of 802.1Q VLAN inside
802.1Q VLAN).
You must configure VLAN Trunks and Q-in-Q exactly as described below:
Site Switch
1 SW 1
and
2
1 SW 2
and
2
Important:
2. Latency between the Layer 2 switches on different sites must be lower than 100ms.
3. Packet lost between the Layer 2 switches on different sites must be lower than 5%.
Internal Sync Port
Port 48
IP 192.0.2.1
Port 48
IP 192.0.2.2
Port 48
IP 192.0.2.15
Port 48
IP 192.0.2.16
Port Port Configuration
1 VLAN Trunk that accepts these VLAN IDs:
and
32
1 VLAN Trunk that accepts these VLAN IDs:
and
32
It is not possible to change the VLAN ID 3951 and the VLAN ID 3952.
n
*
The default Site Sync VLAN IDs are:
n
3600 on Orchestrator ID 1_1 and Orchestrator ID 2_1
l
3601 on Orchestrator ID 1_2 and Orchestrator ID 2_2
l
If these default Site Sync VLAN IDs conflict with the existing VLAN IDs
in your environment, then it is possible to change the Base Site Sync
VLAN IDs on Quantum Maestro Orchestrators.
External Sync Port
Port 47
IP 203.0.113.1
Port 47
IP 203.0.113.2
Port 47
IP 203.0.113.15
Port 47
IP 203.0.113.16
*
3600 (used for a site internal
n
synchronization)
3951 (used for external
n
synchronization)
*
3600 (used for a site internal
n
synchronization)
3952 (used for external
n
synchronization)
Quantum Maestro Getting Started Guide | 163
Dual Site with four Switches