topic Re: r80.10 VSX change sync interface in Firewall and Security Management

r80.10 VSX change sync interface

Geir_Olav_Skei — Thu, 18 Oct 2018 08:38:42 GMT

Hi,

Does anyone know how to change a single sync interface, on a R80.10 VSX-cluster, to a bond-interface?

Re: r80.10 VSX change sync interface

Kaspars_Zibarts — Thu, 18 Oct 2018 16:37:34 GMT

vsx_util change_interfaces is your friend! From management.

Check VSX admin guide for details

Check Point VSX R80.10 Administration Guide

Re: r80.10 VSX change sync interface

Geir_Olav_Skei — Mon, 22 Oct 2018 13:45:34 GMT

vsx_util change_interfaces only lists up the existing bond I am using for VLAN trunk, but not the sync interface.

Re: r80.10 VSX change sync interface

Kaspars_Zibarts — Mon, 22 Oct 2018 14:19:40 GMT

I assume you have created a new bond specifically for sync?

Then you just type it in as new name

Re: r80.10 VSX change sync interface

Jan_Jorgensen — Thu, 07 Nov 2019 08:43:13 GMT

What if changing from "Sync" regular interface to bond with Vlan id taggede?

Change fx from "Sync" name to bond1.3434 - if this possible?

Re: r80.10 VSX change sync interface

cosmos — Wed, 14 Jul 2021 06:50:29 GMT

I know this post is old, but the answer still relevant.

In VSX, the sync interface must be a dedicated interface (including bundles), and change_interfaces only supports moving one physical interface or bundle to another.

If you want redundancy for your sync interface in VSX you must dedicate a new bundle for that purpose... but in R80.40 I have found both Sync and Mgmt are not available in vsx_util change_interfaces. I am not sure why; I am testing a migration where the lab hardware doesn't have Sync and Mgmt and I'm guessing the reconfigure will fail for this reason. That may be an issue as sk86121 (change physical interface names) does not apply to bundles (bonding).