Included in the client’s network are some switches, which rely on IGMP snooping. You must find a
solution to work with these switches. Which of the following answers does NOT lead to a
successful solution?
A.
Set the value of fwha_enable_igmp_snooping module configuration parameter to 1.
B.
Disable IGMP registration in switches that rely on IGMP packets
C.
ClusterXL supports IGMP snooping by default. There is no need to configure anything.
D.
Configure static CAMs to allow multicast traffic on specific ports.
C
igmp snooping requires CCP mode to be in broadcast
By default, CCP is multicast.
sk33221 “Using ClusterXL with IGMP Snooping-enabled switches”:
Note: IGMP Membership is enabled by default starting in R75.40 (i.e., fwha_enable_igmp_snooping=1).
So, “ClusterXL supports IGMP snooping by default” since R75.40
Shouldn’t be B as answer?
Why to disable IGMP snooping on switch which needs it?
By docs default parameter for fwha_enable_igmp_snooping is 1 which is actually just rephrasing option C.
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk33221
D shouldn’t be needed, however I do not think it will cause any issue, so I would not choose this one as answer.
pull out of Advanced Technical Reference Guide R6x R7x:
By default, ClusterXL does not support IGMP registration (also known as IGMP Snooping).
Either disable IGMP registration in switches that rely on IGMP packets to configure their ports, or enable IGMP registration on ClusterXL members per sk33221.
In situations, where disabling IGMP registration in switches is not acceptable, it is necessary to configure static CAMs in order to allow multicast traffic on specific ports.
This question must refer to earlier version of Check Point pre R75.40 as sk33221 does show
Note: IGMP Membership is enabled by default starting in R75.40 (i.e., fwha_enable_igmp_snooping=1).
Thanks for the detailed answer, Vlad 🙂
Choices “A”, “B”, “D” leads to successful solution.
But question is opposite, so “C” is correct answer.
C. ClusterXL supports IGMP snooping by default. There is no need to configure anything.
Agree with rbilka.