CPShared Forums

Follow CPShared on twitter! Forum Runner and Tapatalk mobile support.


Go Back   CPShared Forums > Check Point > Security Gateway Blades

Thread Tools Display Modes
Old 4th May 2012, 03:41 AM
Tyson Tyson is offline
Senior Members of the board
Join Date: Mar 2011
Location: Sydney
Posts: 112
Tyson is on a distinguished road
Default VRRP vs ClusterXL - Discuss

Hi all,

Thought I'd get the ball rolling to hear what everyone's thoughts are regarding the relative advantages and disadvantages of VRRP vs. ClusterXL. As GAiA now supports both what does everyone see as being the more suitable option. My brief thoughts are as follows, though I'm sure I may be incorrect on some of these...

Active/Standby only (I know you can get complex to change priorities on different interfaces but IMO this is a hack not a feature)
Pro - Uses a VMAC by default so hosts don't have to rely on getting a garp on firewall failover
Con - HA support for OSPF (and maybe RIP/BGP). When advertising using the VIP on failover OSPF start's up on the new master, leading to routing table outage for a period of time.

Active/Standby and Load Balancing
Con - Needs a kernel modification for VMAC support

Does anyone want to add their thoughts?
Reply With Quote
Old 4th May 2012, 05:30 AM
phoneboy's Avatar
phoneboy phoneboy is offline
Senior Members of the board
Join Date: Feb 2011
Location: Gig Harbor, WA, USA
Posts: 1,320
phoneboy is on a distinguished road

Currently VRRP in Gaia does not support IPv6, only ClusterXL (VRRPv3 is planned).

Dynamic routing works the same in ClusterXL versus VRRP (it should advertise the VRRP or ClusterXL IP) so that's a wash.
Email: dwelch AT phoneboy DOT com
Unless otherwise noted, views expressed are my own
Reply With Quote

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump

All times are GMT. The time now is 08:09 PM.

Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2015, vBulletin Solutions, Inc.
(c) 2010 PureSecurity - All rights reserved