Question of creating subinterface in ClusterXL environment.

AVG13 — Thu, 27 Jan 2022 07:56:08 GMT

Hi Team ,

We need to create a new subinterface on Checkpoint firewall in existing production environment.

Is below steps are correct ?Or Any addition/modification is required.

Also what preventive measure we need to take (other than backup, snapshot) .

We are having Check Point 12600/R80.20 T118 , Management server is on R80.20 , T202 ,Virtual image

Step 1.Stopping ClusterXL in Standby device #clusterXL_admin down

Step 2.Creating interfaces on Standby device
Standby_FW#add interface eth1-02 vlan 481
Standby_FW#set interface eth1-02.481 ipv4-address x.x.x.2 subnet-mask y.y.y.y
#Standby_FW#set interface eth1-02.481 state on

Step 3.Creating interfaces in Active device
Active_FW#add interface eth1-02 vlan 481
Active_FW#set interface eth1-02.481 ipv4-address x.x.x.3 subnet-mask y.y.y.y
Active_FW#set interface eth1-02.481 state on

Step 4.Changing cluster properties
Smartconsole >Cluster Object >Get interfaces without topology >
Add the new interface to Cluster topology(Virtual IP x.x.x.1)
Save and install the policy

Step 5.Making standby up again
Standby_FW#clusterXL_admin up

Re: Question of creating subinterface in ClusterXL environment.

Chris_Atkinson — Thu, 27 Jan 2022 16:21:41 GMT

For more information please see sk57100.

topic Question of creating subinterface in ClusterXL environment. in Firewall and Security Management

Question of creating subinterface in ClusterXL environment.

Re: Question of creating subinterface in ClusterXL environment.