topic Re: Loopback interface on VSX virtual system in Firewall and Security Management

Loopback interface on VSX virtual system

Gombodorj — Mon, 09 Jan 2023 14:44:42 GMT

I have one virtual system on VSX and I want to use a loopback interface with IP on it.

Command: add interface lo loopback X.X.X.X/32
I have created loop00 loopback interface after turning the VSX off and I can ping to this interface from the main SG.

But after running "set virtual-system 2" and entering the Virtual system, I do not see the loop00 interface in ifconfig and unable to ping to it.

How can I make loopback interface appear on virtual system?

Re: Loopback interface on VSX virtual system

Wolfgang — Mon, 09 Jan 2023 20:30:37 GMT

@Gombodorj what do you want to achieve with this loopback interface? They way you create this loopback interface is not supported.
If you need a dummy interface you can create one on a VLAN trunk as a normal interface in the VSX object. Or you can do this with a physical interface but this interface has to be up.

Re: Loopback interface on VSX virtual system

_Val_ — Tue, 10 Jan 2023 08:09:44 GMT

Second this question, what's the purpose?

Re: Loopback interface on VSX virtual system

Chris_Atkinson — Mon, 13 Feb 2023 03:42:54 GMT

As discussed in a subsequent thread this is not currently supported under VSX, please refer:

https://community.checkpoint.com/t5/Security-Gateways/Loopback-interface-is-going-out-of-routing-table/m-p/170813#M30930

Re: Loopback interface on VSX virtual system

Chris_Atkinson — Mon, 07 Jul 2025 10:54:15 GMT

In the current day there are now additional options available depending on the use case:

VSNext (R82 and higher)
NAT Pools