Table of Contents
Advertisement
7
Configuring Traffic Management
IPSO clusters do not support network types other than Ethernet.
!
All of the interfaces on a cluster node do not have to participate in the
cluster. Interfaces that do not participate in the cluster can be network
types other than Ethernet.
!
All the nodes must have the same number of interfaces participating in the
cluster, and the cluster interfaces must be connected to the same networks.
If You Do Not Use a Dedicated Cluster Protocol Networks
If you do not use dedicated networks as the cluster protocol networks (that is,
if you use production networks for this purpose), IPSO's cluster protocol
messages are propagated throughout the production networks. This is an
unproductive use of bandwidth because cluster protocol messages are used
only by IPSO cluster nodes.
You can prevent the cluster protocol messages from being spread across the
production networks by connecting the networks with switches that use IGMP
snooping.
IPSO sends out IGMP membership reports for the cluster protocol multicast
group. A switch using IGMP snooping will then forward cluster protocol
messages only to group nodes—that is, the other cluster nodes. It will not
forward the cluster protocol traffic to ports that are not connected to cluster
nodes.
Note
Nokia recommends that you use dedicated networks as the cluster
protocol networks—that is, the cluster protocol networks should not carry
production traffic. If you configure a cluster this way, the cluster protocol
messages will not appear on your production networks even if the
switches on the data networks do not support IGMP snooping.
Note
If you run Check Point's VPN-1/FireWall-1 with an IPSO cluster and want
to use this configuration (use a production network for cluster protocol
354
Voyager Reference Guide
Advertisement
Table of Contents
