Quantum 1U User manual

[Classification: Protected]
24 April 2023
QUANTUM MAESTRO
Getting Started Guide

Table of Contents
Quantum Maestro Getting Started Guide|2
Table of Contents
Introduction 4
Overview 4
Shipping Carton Contents 5
Features 6
Speed and Throughput 7
Ports, Power Supply Units, and Fan Units 7
Getting Started with MHO-140 - Single Site with Two Orchestrators 8
Part 1 - Installing the Hardware and Connecting Cables 8
Part 2 - Initial Configuration on each Orchestrator 12
Part 3 - Configuration of Security Groups 15
Part 1 - Creating a New Security Group 15
Part 2 - Configuring Gaia Settings on the New Security Group 16
Part 3 - Configuring a Security Gateway Object in SmartConsole 17
Part 4 - Monitoring the Security Group Members 17
Hardware Components 18
MHO-140 Front Panel 23
MHO-140 Rear Panel 24
Ports 25
Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack 29
Connecting Cables to Quantum Maestro Orchestrators 41
Splitting the Ports with Breakout Cables 41
Breakout Cables 41
MHO-175 Splitting Options 43
MHO-170 Splitting Options 46
MHO-140 Splitting Options 47
Single Site 48
Connecting Two Quantum Maestro Orchestrators for Redundancy 48
Diagram 48
Workflow 55
Connecting Cables to MHO-140 59
Connecting to the Management Ports with DAC or Fiber Cables 59
Connecting to the Uplink Ports with DAC or Fiber Cables 61
Connecting to the Uplink Ports with Breakout Cables 63

Table of Contents
Quantum Maestro Getting Started Guide|3
Connecting to the Downlink Ports with DAC or Fiber Cables 66
Quantum Maestro Orchestrator Ports and Gaia OS Interfaces 69

Introduction
Quantum Maestro Getting Started Guide|4
Introduction
In This Section:
Overview 4
Shipping Carton Contents 5
Features 6
Speed and Throughput 7
Ports, Power Supply Units, and Fan Units 7
Quantum Maestro Orchestrator is a scalable Network Security System built to secure the largest networks in
the world by orchestrating multiple Check Point Security Appliances into a unified system.
The Quantum Maestro Orchestrator provides:
nSecurity of infinite scale
nRedundancy - Quantum Maestro Orchestrator automatically distributes traffic between the Security
Appliances assigned to Security Groups
nAbility to connect more Security Appliances and use their resources easily in the existing Security
Groups
Overview
Quantum Maestro Orchestrator 1U systems are ideal for leaf and spine data center network solutions that
provide maximum flexibility, with port speeds from 1 Gbit/sec to 100 Gbit/sec per port, and port density that
enables full rack connectivity to any server at any speed. The ports allow a variety of blocking ratios that suit
all application requirements.
Quantum Maestro Orchestrator 1U systems enable the use of 1, 10, 40 and 100 GbE port speeds in a large
scale without the need to change power infrastructure facilities.

Introduction
Quantum Maestro Getting Started Guide|5
Shipping Carton Contents
This section describes the contents of the shipping carton.
Item Description
Appliance Quantum Maestro Orchestrator
Rack Mounting Accessories n2 static (fixed) rack mount rails
n2 rack mount blades
n2 rack mount ears
n8 M6 standard cage nuts
n8 M6 standard pan-head Phillips screws
n4 flat head Phillips screws with a round patch
(6-32x1/4", 100-Deg, Patch 360)
Cables and Adapters n2 power cables (Type C13-C14)
n2 cable retainers
n1 DB9 to RJ45 serial console cable
n1 DAC cable, 3m
Documentation nQuick Start Guide
nPort Mapping
nUser license agreement
Table: Shipping Carton Contents
Notes:
nDB9 connectors are also known as DE9 connectors.
nBefore installing your new Quantum Maestro Orchestrator, unpack it and check the parts list to make
sure that all the parts are in the package.
Check the parts for visible damage that may have occurred during shipping.

Introduction
Quantum Maestro Getting Started Guide|6
Features
nThroughput and processing capacity:
lMHO-175 - Throughput of up to 3200 Gbit/sec and processing capacity up to 4.76 Bpps
lMHO-170 - Throughput of up to 3200 Gbit/sec and processing capacity up to 4.76 Bpps
lMHO-140 - Throughput of up to 1280 Gbit/sec and processing capacity up to 2.97 Bpps
nFlat latency in the cut-through mode:
lMHO-175 - 425 ns
lMHO-170 - 300 ns
lMHO-140 - 300 ns
nSpeeds of 1, 10, 40, and 100 GbE
nDynamically-shared, flexible packet buffering:
lMHO-175 - 42 MB
lMHO-170 - 16 MB
lMHO-140 - 16 MB
nLowest power, under 5 W per 100 GbE port
nEnhanced scalability
n1+1 hot-swappable power supplies
n4 N+1 hot-swap fans
nColor coded PSUs and fans

Introduction
Quantum Maestro Getting Started Guide|7
Speed and Throughput
The table below lists maximum throughput and interface speed for each Quantum Maestro Orchestrator
model:
Orchestrator
Model
10 GbE
SFP28 Interfaces
40 / 100 GbE
QSFP28 Interfaces
Maximal
Throughput
MHO-175 128
(use QSFP to SFP
breakout cables)
32 3.2 Tbit/sec
MHO-170 64
(use QSFP to SFP
breakout cables)
32 3.2 Tbit/sec
MHO-140 Total 64
48 SFP+ 8 QSFP28
(use QSFP to SFP
breakout cables)
8 1.28 Tbit/sec
Quantum Maestro Orchestrator supports different interfaces and speed rates when you use QSFP to SFP
adapters, or hybrid cables. For more information, see "Splitting the Ports with Breakout Cables" on page41 .
Ports, Power Supply Units, and Fan Units
Orchestrator
Model MGMT Ports USB Ports Console Ports PSUs Fans
MHO-175 1 on the front
panel
1 on the front
panel
1 on the front
panel
2 units 4 units
MHO-170 1 on the front
panel
1 on the front
panel
1 on the front
panel
2 units 4 units
MHO-140 2 on the rear
panel
1 on the rear
panel
1 on the rear
panel
2 units 4 units

Getting Started with MHO-140 - Single Site with Two Orchestrators
Quantum Maestro Getting Started Guide|8
Getting Started with MHO-140 -
Single Site with Two Orchestrators
Part 1 - Installing the Hardware and Connecting
Cables
1. Mount the two Quantum Maestro Orchestrators MHO-140 in the racks on the site.
See "Mounting the Quantum Maestro Orchestrator MHO-140 and MHO-170 in a Rack" on page29 .
2. Install the Security Appliances for your Security Groups.
Procedure
a. Install the applicable Expansion Line Cards (if required) in the appliances.
See Installing and Removing Line Cards .
Maestro configuration supports only ports 10 Gbps or faster.
b. Mount appliances in their racks.
See the Getting Started Guide for your appliances in sk96246.
c. Power on the Security Appliances.
3. Connect a DAC cable between the dedicated Synchronization ports 48 on the two Orchestrators.
For more information, see "Port Mapping for the Quantum Maestro Orchestrator MHO-140" on
page20 .

Getting Started with MHO-140 - Single Site with Two Orchestrators
Quantum Maestro Getting Started Guide|9
4. Connect the required cables between the Security Appliances and the applicable 10 Gbps Downlink
ports 27 -47 on each Orchestrator.
More information
Important:
nMaestro configuration supports only ports 10 Gbps or faster on Security
Appliances.
nTo connect Security Appliances to these 10 Gbps Downlink ports, use a
Fiber cable or a DAC cable.
nTo connect Fiber cables, you must use only the supported transceivers.
See sk92755 - Compatibility of transceivers for Check Point appliances.
See:
n
"Port Mapping for the Quantum Maestro Orchestrator MHO-140" on page20 .
n
"Connecting Two Quantum Maestro Orchestrators for Redundancy" on page48 .
Diagrams:
Connecting cables between Downlink ports on each Orchestrator and 2 ports on the
Dual Port Card on each Security Appliance
Illustration Instructions
On each Security Appliance (C) in
the Security Group:
a. Connect a cable from Port 1
on the Dual Port Card to a
Downlink port on the first
Orchestrator (A).
b. Connect a cable from Port 2
on the Dual Port Card to a
Downlink port on the second
Orchestrator (B).

Getting Started with MHO-140 - Single Site with Two Orchestrators
Quantum Maestro Getting Started Guide|10
Connecting cables between Downlink ports on each Orchestrator and 1 out of 4 ports on
the Quad Port Card on each Security Appliance
Illustration Instructions
On each Security Appliance (C) in
the Security Group:
a. Connect a cable from Port 1
on the Quad Port Card to a
Downlink port on the first
Orchestrator (A).
b. Connect a cable from Port 2
on the Quad Port Card to a
Downlink port on the second
Orchestrator (B).