topic Re: 5100 INTERFACES BRIDGE MODE in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/5100-INTERFACES-BRIDGE-MODE/m-p/160727#M28378 <P>You could do that... just make sure bridge consists of NON vlan interfaces, but physical ones, as described below.</P> <P><A href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/VLAN-Interfaces.htm" target="_blank">https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/VLAN-Interfaces.htm</A></P> <P>If its vlan trunk, then follow below:</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="the_rock_0-1667051309115.gif" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/18262i73D5AA13E2431BCE/image-size/medium?v=v2&amp;px=400" role="button" title="the_rock_0-1667051309115.gif" alt="the_rock_0-1667051309115.gif" /></span></P> <P>&nbsp;</P> <P><SPAN class="MCDropDownHead dropDownHead"><A class="MCDropDownHotSpot dropDownHotspot MCDropDownHotSpot_ MCDropDownHotSpot_No_Page_Break_Inside MCHotSpotImage" role="button" href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/VLAN-Interfaces.htm#" aria-expanded="true" aria-controls="mc-dropdown-bodyf47aa4c1-a1fc-4a8e-9ac2-83784e63eed4" target="_blank">Trunk Mode VLAN</A></SPAN></P> <DIV id="mc-dropdown-bodyf47aa4c1-a1fc-4a8e-9ac2-83784e63eed4" class="MCDropDownBody dropDownBody"> <P>If you configure the switch ports as VLAN trunk, the<SPAN>&nbsp;</SPAN><SPAN class="mc-variable Vars_Other.tp_cp variable">Check Point</SPAN><SPAN>&nbsp;</SPAN>Bridge interface should<SPAN>&nbsp;</SPAN><STRONG>not</STRONG><SPAN>&nbsp;</SPAN>interfere with the VLANs.</P> <P>To configure a Bridge interface with VLAN trunk, create the Bridge interface with two physical (non-VLAN) interfaces as its subordinate interfaces (see<SPAN>&nbsp;</SPAN><A class="MCXref xref" href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/Bridge-Interfaces.htm" target="_blank">Bridge Interfaces</A>).</P> <P>The<SPAN>&nbsp;</SPAN><SPAN class="mc-variable Vars_Other.tp_sgate variable">Security Gateway</SPAN><SPAN>&nbsp;</SPAN>processes the tagged packet and does not remove VLAN tags from them.</P> <P>The traffic passes with the original VLAN tag to its destination.</P> <TABLE class="TableStyle-TP_Table_Notes" cellspacing="0"><COLGROUP><COL class="TableStyle-TP_Table_Notes-Column-Column_Style_Image" /><COL class="TableStyle-TP_Table_Notes-Column-Column_Style_Text" /></COLGROUP> <TBODY> <TR class="TableStyle-TP_Table_Notes-Body-Body"> <TD class="TableStyle-TP_Table_Notes-BodyB-Column_Style_Image-Body"><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="the_rock_1-1667051309117.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/18261i92CDF1BA19F4C536/image-size/medium?v=v2&amp;px=400" role="button" title="the_rock_1-1667051309117.png" alt="the_rock_1-1667051309117.png" /></span> <P>&nbsp;</P> </TD> <TD class="TableStyle-TP_Table_Notes-BodyA-Column_Style_Text-Body"> <P><SPAN class="Note">Note</SPAN><SPAN>&nbsp;</SPAN>- VLAN translation is not supported in Trunk mode.</P> </TD> </TR> </TBODY> </TABLE> </DIV> Sat, 29 Oct 2022 13:48:38 GMT the_rock 2022-10-29T13:48:38Z 5100 INTERFACES BRIDGE MODE https://community.checkpoint.com/t5/Firewall-and-Security-Management/5100-INTERFACES-BRIDGE-MODE/m-p/160704#M28374 <P>Hi Everyone,&nbsp;</P><P>&nbsp;</P><P>Can everybody help to know if it is possible to configure 4 interfaces of a 5100 appliance as a bridge mode?&nbsp;</P><P>I want to assign 2 interfaces for 1 switch core and 2 other interfaces for anorther switch core which are in HA.&nbsp;</P><P>&nbsp;</P><P>Thanks,&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 28 Oct 2022 20:20:35 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/5100-INTERFACES-BRIDGE-MODE/m-p/160704#M28374 josrime 2022-10-28T20:20:35Z Re: 5100 INTERFACES BRIDGE MODE https://community.checkpoint.com/t5/Firewall-and-Security-Management/5100-INTERFACES-BRIDGE-MODE/m-p/160717#M28377 <P>Yes 5100 support bridge mode. Each bridge consist of two interfaces.</P> <P>A diagram would help to understand the topology that you're attempting to deploy here so that the relevant caveats or issues can be shared.</P> Sat, 29 Oct 2022 01:23:53 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/5100-INTERFACES-BRIDGE-MODE/m-p/160717#M28377 Chris_Atkinson 2022-10-29T01:23:53Z Re: 5100 INTERFACES BRIDGE MODE https://community.checkpoint.com/t5/Firewall-and-Security-Management/5100-INTERFACES-BRIDGE-MODE/m-p/160727#M28378 <P>You could do that... just make sure bridge consists of NON vlan interfaces, but physical ones, as described below.</P> <P><A href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/VLAN-Interfaces.htm" target="_blank">https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/VLAN-Interfaces.htm</A></P> <P>If its vlan trunk, then follow below:</P> <P>&nbsp;</P> <P><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="the_rock_0-1667051309115.gif" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/18262i73D5AA13E2431BCE/image-size/medium?v=v2&amp;px=400" role="button" title="the_rock_0-1667051309115.gif" alt="the_rock_0-1667051309115.gif" /></span></P> <P>&nbsp;</P> <P><SPAN class="MCDropDownHead dropDownHead"><A class="MCDropDownHotSpot dropDownHotspot MCDropDownHotSpot_ MCDropDownHotSpot_No_Page_Break_Inside MCHotSpotImage" role="button" href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/VLAN-Interfaces.htm#" aria-expanded="true" aria-controls="mc-dropdown-bodyf47aa4c1-a1fc-4a8e-9ac2-83784e63eed4" target="_blank">Trunk Mode VLAN</A></SPAN></P> <DIV id="mc-dropdown-bodyf47aa4c1-a1fc-4a8e-9ac2-83784e63eed4" class="MCDropDownBody dropDownBody"> <P>If you configure the switch ports as VLAN trunk, the<SPAN>&nbsp;</SPAN><SPAN class="mc-variable Vars_Other.tp_cp variable">Check Point</SPAN><SPAN>&nbsp;</SPAN>Bridge interface should<SPAN>&nbsp;</SPAN><STRONG>not</STRONG><SPAN>&nbsp;</SPAN>interfere with the VLANs.</P> <P>To configure a Bridge interface with VLAN trunk, create the Bridge interface with two physical (non-VLAN) interfaces as its subordinate interfaces (see<SPAN>&nbsp;</SPAN><A class="MCXref xref" href="https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_Gaia_AdminGuide/Topics-GAG/Bridge-Interfaces.htm" target="_blank">Bridge Interfaces</A>).</P> <P>The<SPAN>&nbsp;</SPAN><SPAN class="mc-variable Vars_Other.tp_sgate variable">Security Gateway</SPAN><SPAN>&nbsp;</SPAN>processes the tagged packet and does not remove VLAN tags from them.</P> <P>The traffic passes with the original VLAN tag to its destination.</P> <TABLE class="TableStyle-TP_Table_Notes" cellspacing="0"><COLGROUP><COL class="TableStyle-TP_Table_Notes-Column-Column_Style_Image" /><COL class="TableStyle-TP_Table_Notes-Column-Column_Style_Text" /></COLGROUP> <TBODY> <TR class="TableStyle-TP_Table_Notes-Body-Body"> <TD class="TableStyle-TP_Table_Notes-BodyB-Column_Style_Image-Body"><span class="lia-inline-image-display-wrapper lia-image-align-inline" image-alt="the_rock_1-1667051309117.png" style="width: 400px;"><img src="https://community.checkpoint.com/t5/image/serverpage/image-id/18261i92CDF1BA19F4C536/image-size/medium?v=v2&amp;px=400" role="button" title="the_rock_1-1667051309117.png" alt="the_rock_1-1667051309117.png" /></span> <P>&nbsp;</P> </TD> <TD class="TableStyle-TP_Table_Notes-BodyA-Column_Style_Text-Body"> <P><SPAN class="Note">Note</SPAN><SPAN>&nbsp;</SPAN>- VLAN translation is not supported in Trunk mode.</P> </TD> </TR> </TBODY> </TABLE> </DIV> Sat, 29 Oct 2022 13:48:38 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/5100-INTERFACES-BRIDGE-MODE/m-p/160727#M28378 the_rock 2022-10-29T13:48:38Z