Technical data

Managing VSX Clusters
Check Point VSX Administration Guide NGX R67 | 120
Enabling STP Bridge Mode when Creating Member
When creating a new VSX gateway for use as a cluster member, configure the following cluster options
during the initial configuration process (sysconfig or cpconfig):
1. Enter 'y' in response to the "Would you like to install a Check Point clustering
product? question".
2. Enter 'n', if prompted, to disable the Active/Standby Bridge mode. Continue with the remainder of the
initial configuration process.
Enabling the STP Bridge Mode for Existing Members
To enable the STP Bridge mode for existing cluster members:
1. Execute the cpconfig command.
2. Enable cluster membership for this member (If a numerical value appears here, cluster membership
has already been enabled).
3. Disable ClusterXL for Bridge Active/Standby.
4. Reboot the member.
Configuring Clusters for STP Bridge Mode
To enable the STP Bridge mode for a cluster:
1. Open the desired cluster definition in SmartDashboard and navigate to VSX> Cluster Properties >
Advanced > VSX> Bridge Configuration.
2. Enable the Standard Layer-2 Loop Detection Protocols option.
Configuring Virtual Systems for the STP Bridge Mode
To configure a Virtual System to use the Bridge mode, you must define it as a Virtual System in the Bridge
mode when initially creating it. You cannot reconfigure an existing, non-Bridge mode Virtual System to use
the Bridge mode at a later time.
Configuring PVST+ Load Sharing
Defining the Spanning Tree Structure
Define and configure the Spanning Tree structure for each VLAN according to your network deployment.
Please refer to your network hardware documentation for specific procedures.