topic Re: Can CheckPoint ClusterXL create Bonding with cisco switch port(layer2) in Firewall and Security Management

Can CheckPoint ClusterXL create Bonding with cisco switch port(layer2)

Wei_Soon_Heng — Wed, 02 Sep 2020 02:38:21 GMT

Hi Guys,

Can CheckPoint ClusterXL create Bonding with cisco switch port(layer2) as described in picture below?As per understanding, there is no any problem if peer cisco port is having IP address assigned(L3).

Re: Can CheckPoint ClusterXL create Bonding with cisco switch port(layer2)

vinceneil666 — Wed, 02 Sep 2020 05:41:50 GMT

A bond interface towards a cisco switch will work fine, both with L2 and L3. You would configure your cisco switch with port-channel and you can add LACP.

Regarding your drawing, the switches needs to be stacked or, for cisco, support VSS - meaning that you can do a multi chassis port channel. Your drawing looks to be showing two separeate cisco switches - that is an issue unless they run (for example) VSS. What hardware and how is the setup of the cisco switches ?

Re: Can CheckPoint ClusterXL create Bonding with cisco switch port(layer2)

Wei_Soon_Heng — Wed, 02 Sep 2020 06:07:47 GMT

Ya, it is 6000 series model with VSS feature enabled.
Normally, what would channel-mode use in switch when CP configure 802.3ad protocol in bond interface?

Thanks

Re: Can CheckPoint ClusterXL create Bonding with cisco switch port(layer2)

Wolfgang — Wed, 02 Sep 2020 07:04:11 GMT

@Wei_Soon_Heng

802.3ad means LACP. You have to set channel-mode to active on the Cisco switch.

Configuring LACP (802.3ad) Between a Catalyst 6500/6000 and a Catalyst 4500/4000 shows a very good description for the difference on the cisco switch for CatOS or IOS.

regards

Wolfgang