Step 2: Configuring network interfaces

If you have chosen to create a cluster

Configure the main link

Interface

Main interface used for linking both firewalls that make up the

cluster.

Select it from the list of objects in the drop-down list.

Define name

Define a customized name for the main link.

Define the IP address and network mask

Enter the IP address and subnet mask dedicated to your main link. The format is expressed in address/mask.

Secondary link (optional)

If the firewall does not receive responses on the main link, it will attempt to connect to this secondary link. This will prevent both firewalls from switching to active/active mode if a problem arises on the main link.

Use a second communication link

Select this option in order to enable the fields below it and to define a secondary link for your cluster.

Interface

Secondary interface used for linking both firewalls that make up the

cluster.

Select it from the list of objects in the drop-down list.

Define name

Define a customized name for your secondary link.

Define the IP address

Enter the IP address for your secondary link.

NOTE

In order for a link to work, both members of the cluster have to use the same interface.

If you have chosen to join a cluster

This option assumes that a cluster has already been created beforehand, in order for a firewall to be able to join it.

As such, some of the information from the first firewall created will be copied.

Configure the main link

Interface

Main interface used for linking both firewalls that make up the

cluster.

 

This has to be the same interface that you had selected during the creation of the cluster on the first firewall.

Define the IP address and network mask

IP address and network mask dedicated to your main link. The format is expressed in address/mask.

 

This address has to belong to the same sub-network as the one defined when creating the cluster on the first firewall.

Secondary link (optional)

If the firewall does not receive responses on the main link, it will attempt to connect to this secondary link. This will prevent both firewalls from switching to active/active mode if a problem arises on the main link.

Use a second communication link

Select this option in order to enable the fields below it and to define a secondary link for your cluster.

 

This option must only be selected if it was also selected during the creation of the cluster on the first firewall.

Interface

Secondary interface used for linking both firewalls that make up the

cluster.

 

This has to be the same interface that you had selected during the creation of the cluster on the first firewall.

Define the IP address

IP address for your secondary link.

 

This address has to belong to the same sub-network as the one defined when creating the cluster on the first firewall.

NOTE

In order for a link to work, both members of the cluster have to use the same interface.