topic Re: Check point vsx cluster in Firewall and Security Management

Check point vsx cluster

aruns — Tue, 16 May 2023 09:32:05 GMT

How can we make interface state off in vsx cluster . If you know pls provide command for CLI

Re: Check point vsx cluster

PhoneBoy — Tue, 16 May 2023 23:03:29 GMT

I assume this is done via clish on the relevant gateways using something like: set interface ifname state off
That would be after you use the command set virtual-system X (where X is the relevant VSID).

Re: Check point vsx cluster

the_rock — Tue, 16 May 2023 23:49:12 GMT

You can do vsenv command first from expert and then one Phoneboy gave from clish, set interface ifname state off (that should be same command like on regular Gaia)

Andy

Re: Check point vsx cluster

ramakrishnan — Thu, 15 Jun 2023 11:43:06 GMT

I have a question following by ArunS.

How we going to shutdown the interface when VS in 3 clusters(For example, we need to off the interface clish command all 3 clusters at a time..?) If we off the interface in one cluster, others two cluster member will sync up or bring the inconsistence in the members?

Also, the interface which we want to off is a bond interface, not a physical interface.

Re: Check point vsx cluster

PhoneBoy — Thu, 15 Jun 2023 14:35:35 GMT

Interfaces changes like this need to be made manually on each cluster member in a maintenance window.