topic Re: R80.10 GW - VSX HA/VSLS - Loopback Interfaces on VS ? in Firewall and Security Management

R80.10 GW - VSX HA/VSLS - Loopback Interfaces on VS ?

Geoffray_REAU — Thu, 12 Oct 2017 18:06:21 GMT

Hi folks

I'm currently staging 2 Open Server gateway with ClusterXL HA and VSLS on R80.10, with the main goal to setup dynamic routing between Virtual Systems and some external routers using eBGP sessions.

So far, the setup is running fine, but I want to go further.

Is there any way to configure one or several loopback interfaces on a Virtual System ? If no, is there any chance this feature is already on development roadmap of future version ?

I will open a case to Check Point support asap for this feature request.

Re: R80.10 GW - VSX HA/VSLS - Loopback Interfaces on VS ?

cp_mummy — Wed, 22 Jan 2020 15:53:25 GMT

hi,

I'm want to test bgp in a similar solution (vsx vsls) but havn´t found configuration examples. I would be most greatful if you could point me in thre right direction.

I don´t have a lab to test it in, just a vs in a production environment to test with, thus would like to be sure of what I do.

Is it correct that the configuration is done through clish and starts with the "set virtual-system" command?

have you btw had any issues with bpg in your solution?

thx

Re: R80.10 GW - VSX HA/VSLS - Loopback Interfaces on VS ?

RKinsp — Mon, 18 Jan 2021 21:08:20 GMT

Hello Geoffray. Did this ever get solved? I am also trying to create a loopback on VSX (in a cluster). I've been able to add loopback through CLI, but it does not show up in SmartConsole and it does not sync between gateways. Thanks, RK

Re: R80.10 GW - VSX HA/VSLS - Loopback Interfaces on VS ?

Chris_Atkinson — Thu, 16 Feb 2023 09:14:45 GMT

R81.10 (sk170416) introduced the use of a loopback interface with Dynamic Routing in ClusterXL environments, but not necessarily for VSX however that would be an RFE and is currently documented as unsupported in sk79700.

Currently dummy DMZ or VLAN interfaces are the workaround depending on the use case, up to and including R81.20.

Re: R80.10 GW - VSX HA/VSLS - Loopback Interfaces on VS ?

CheckPointerXL — Sun, 29 Jan 2023 21:02:01 GMT

https://community.checkpoint.com/t5/Security-Gateways/loopback-interface-as-Router-ID-in-a-Cluster-XL-configuration/m-p/169528/highlight/true#M30702