Deploying With Smartprovisioning - Infinity Check Point L-71WD Administration Manual

To create a SmartLSM Cluster profile:
1. In SmartDashboard, from Network Objects, right-click Check Point > SmartLSM profile >
Small Office Appliance Cluster.
2. In General Properties, enter a Name for the profile (for example, ClusterProfile1).
3. Select the Cluster Members tab and click Add to add the two cluster members to the profile.
4. Select the Topology tab and click Edit to insert a template topology.
For each SmartLSM cluster, you must define at least 3 networks:
• External (one interface for each Cluster Member and shared virtual IP address)
• Internal (one interface for each Cluster Member and shared virtual IP address)
• Internal - Sync (one interface for each Cluster Member)
The network addresses (for example, 1.1.1.194) for each interface are not the actual
addresses for your SmartLSM Cluster environment. Those are used for the template. The
actual network addresses are modified in the next configuration step in the SmartProvisioning
application.
Important -
The host octet for each member's interface address such as "59" for Member1 - WAN (for
example, 1.1.1.59) must be its real host address and cannot be modified. Make sure to
configure it correctly.
The host octet for the Virtual IP addresses can be modified later.
5. For each Virtual IP interface, double-click the text field to enter the interface name, security
zone, network type, IP address, and Net Mask.
6. For the Internal and Sync interfaces, select Network defined by the interface IP and Net
Mask. Set Anti-Spoofing for each interface in the Anti-Spoofing tab. Keep the default settings
in the Member Network tab.
7. For each cluster member, double-click the Topology text field to enter the interface name, IP
address, and Net Mask. For VLANs, make sure the member names use the actual physical
interface names on the machines. Note that these are the same names that are shown in the
appliance's WebUI, but replace the colon character ":" with a period character "."
For example, if the WebUI shows LAN1:10, enter here LAN1.10
8. Click Save and install policy on the Cluster Profile.
9. Close SmartDashboard.
10. Continue in SmartProvisioning

Deploying with SmartProvisioning

You can use SmartProvisioning to manage Check Point Appliance gateways with the SmartLSM
profiles defined in SmartDashboard. Configure these appliances using the First Time
Configuration Wizard or a USB drive configuration file before you manage them with
SmartProvisioning.
For more information about large-scale deployment using SmartProvisioning, see the
SmartProvisioning Administration Guide
Check Point 1100/1200R/1400 Appliances Centrally Managed Administration Guide R77.20.75
("Creating a SmartLSM Appliance
.
Installation
Cluster" on page 30).
| 24