Nokia Network Voyager for IPSO 4.0 Reference Guide 241
Using the Master Node as the NTP Server
To configure the cluster master as the NTP server, do the following steps on the NTP
configuration page:
1. Log into Cluster Voyager.
2. Display the NTP Configuration page.
3. Enable NTP.
After you enable NTP, you see, you see additional options.
4. Enter one the cluster IP addresses under NTP Servers.
The cluster IP addresses are the addresses that are shared by the interfaces participating in
the cluster.
5. Make sure that the NTP Master choice is set to Yes.
6. Click Apply.
Configuring NGX for Clustering
If the cluster will be in service as soon as it becomes active, you should configure and enable
NGX before making the cluster active. You must configure NGX appropriately.
Follow the guidelines below when configuring NGX to work with an IPSO cluster. Refer to the
Check Point documentation for details.
Each cluster node must run exactly the same version of NGX.
You must install and enable exactly the same Check Point packages on each node. In other
words, each node must have exactly the same set of packages as all the other nodes.
When you use Check Point’s cpconfig program (at the command line or through the Voyager
interface to this program), follow these guidelines:
You must install NGX as an enforcement module (only) on each node. Do not install it as
a management server and enforcement module.
After you choose to install NGX as an enforcement module, you are asked if you want to
install a Check Point clustering product. Answer yes to this question.
After you choose to install a Check Point clustering product (and reboot the system when
prompted to do so, you should resume using the cpconfig program to finish the initial
configuration of NGX. One of the options available to you at this point is to enable
CheckPoint SecureXL. Do not enable SecureXL.
Create and configure a gateway cluster object:
Use the Check Point Smart Dashboard application to create a gateway cluster object.
Set the gateway cluster object address to the external cluster IP address (that is, the
cluster IP address of the interface facing the Internet).
Add a gateway object for each Nokia appliance to the gateway cluster object.
In the General Properties dialog box for the gateway cluster object, do not check
ClusterXL.