https://community.checkpoint.com/t5/Firewall-and-Security-Management/802-3ad-Transmit-Hash-Policy/m-p/110291#M15152 <P>Looking for some guidance on interface bond configuration facing cisco switches. Customer has a cisco switch configured with a port-channel and load balancing set to src-mac connected into a bonded interface configured as lacp 802.3ad, transmit-hash-policy layer2.&nbsp;<BR />The switch was recently introduced into the environment and we are seeing stats on the cisco interfaces that belong to the port-channel which suggest 1st interface is transmitting and the 2nd interface receiving. Therefore we looking to change the load balancing setting on the switch to "src-dst-ip" however I am also questioning the configuration on the fw bond interface. Configured for 802.3ad, is the "transmit-has-policy layer2" setting even relevant (if the bond is not configured for XOR), or should this be changed to layer3+4?</P> Tue, 09 Feb 2021 10:49:23 GMT nucusr 2021-02-09T10:49:23Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/802-3ad-Transmit-Hash-Policy/m-p/110291#M15152 <P>Looking for some guidance on interface bond configuration facing cisco switches. Customer has a cisco switch configured with a port-channel and load balancing set to src-mac connected into a bonded interface configured as lacp 802.3ad, transmit-hash-policy layer2.&nbsp;<BR />The switch was recently introduced into the environment and we are seeing stats on the cisco interfaces that belong to the port-channel which suggest 1st interface is transmitting and the 2nd interface receiving. Therefore we looking to change the load balancing setting on the switch to "src-dst-ip" however I am also questioning the configuration on the fw bond interface. Configured for 802.3ad, is the "transmit-has-policy layer2" setting even relevant (if the bond is not configured for XOR), or should this be changed to layer3+4?</P> Tue, 09 Feb 2021 10:49:23 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/802-3ad-Transmit-Hash-Policy/m-p/110291#M15152 nucusr 2021-02-09T10:49:23Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/802-3ad-Transmit-Hash-Policy/m-p/110296#M15153 <P>LACP layer3+4 would be my recommendation if changing the switch to src-dst-ip</P> <P>Depending on version also suggested a Jumbo including&nbsp;<SPAN>PMTR-60804</SPAN></P> <P>&nbsp;</P> Tue, 09 Feb 2021 11:58:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/802-3ad-Transmit-Hash-Policy/m-p/110296#M15153 Chris_Atkinson 2021-02-09T11:58:20Z