Technical data
Managing VSX Clusters
Check Point VSX Administration Guide NGX R67 | 104
2. In the Route Configuration window, modify the IP address, net mask and next hop parameters as
necessary.
3. Enable or clear the Propagate route to adjacent Virtual Devices option as necessary.
Click Help for details regarding the various properties and options.
Calculating topology automatically based on routing information
Enable this option to allow VSX to automatically calculate the network topology based on interface and
routing definitions (enabled by default). VSX creates a automatic links, or connectivity cloud objects linked to
existing internal or external networks.
This option is not available in the Bridge mode.
When employing dynamic routing, it is recommended to disable this option.
VPN Domain
The VPN Domain defines the set of hosts located behind a given Virtual System that communicate via a
VPN tunnel with peer Virtual Systems.
When including a virtual device as part of a VPN connection, you must specify a VPN Domain. The domain
definition specifies those Virtual System interfaces that are included in the VPN. You can define a VPN
Domain in one of two ways by enabling the appropriate option:
All IP Addresses behind gateway based on topology information: Includes all hosts not located
behind an external gateway cluster interface.
Manually Defined: Includes all hosts in the selected network or group.
Remote Access Communities: You can optionally specify an alternative VPN domain for Remote
Access Community traffic.
To specify the VPN domain:
1. Click Set domain for Remote Access Community.
2. In the VPN Domain per Remote Access Community window, double-click a Remote Access
Community.