topic Re: Port Channel x Checkpoint in Firewall and Security Management

Port-Channel x Checkpoint

nãbru — Thu, 25 May 2023 12:45:59 GMT

Hello

I would like to ask a question, currently the speed of the fw ports is 1GB, we are using two boxes. Would it be possible to have a port-cahnnel between the firewall and the SSwitch and switch to 2BG?

Port Channel x Checkpoint

nãbru — Thu, 25 May 2023 12:27:13 GMT

Hello

I would like to ask a question, currently the speed of the fw ports is 1GB, we are using two boxes. Would it be possible to have a port-cahnnel between the firewall and the SSwitch and switch to 2BG?

Re: Port Channel x Checkpoint

G_W_Albrecht — Thu, 25 May 2023 12:32:41 GMT

Why do you post in General, this surely is not a General question, but depends mainly on the GW HW used. As you did not mention which CP GWs you use with which NICs, this can not be answered at all..

Re: Port-Channel x Checkpoint

G_W_Albrecht — Thu, 25 May 2023 12:49:17 GMT

Which hardware / appliance do you use ?

Re: Port-Channel x Checkpoint

the_rock — Thu, 25 May 2023 13:00:54 GMT

I recall customer doing this before, just cant recall all the steps they had to do. Will see if I can find it, as they also had TAC case for this as well.

Re: Port-Channel x Checkpoint

Chris_Atkinson — Thu, 25 May 2023 13:09:11 GMT

The simple answer is yes on current supported models.

How depends on several factors as have started to be asked here already, but also if the FW are clustered and if VLANs / Trunks are being used and the switch setup etc.

Re: Port Channel x Checkpoint

Chris_Atkinson — Thu, 25 May 2023 13:15:33 GMT

Merged / moved the duplicate threads

Re: Port-Channel x Checkpoint

G_W_Albrecht — Thu, 25 May 2023 13:26:37 GMT

We do not know anything about the GW HW used - so NICs can not be suggested...

Re: Port-Channel x Checkpoint

Bob_Zimmerman — Thu, 25 May 2023 14:16:43 GMT

It shouldn't depend on the hardware. The Linux bonding driver can work with any ethernet interfaces visible to the system. If there is at least one unused interface, it should be possible to build a bond with it, move traffic from the current interface to the bond, then add the current interface to the bond to get two links. This will definitely involve an outage.

Re: Port-Channel x Checkpoint

Chris_Atkinson — Thu, 25 May 2023 14:19:37 GMT

Older SMB boxes/firmwares are a notable exception hence the query I believe.

Re: Port-Channel x Checkpoint

nãbru — Mon, 29 May 2023 20:26:29 GMT

Hi.

2 boxes model Check Point 3200

Does not have VLAN AND TRUNK

And the switch is with 1G speed on the ports

Port-Channel between the two firewalls and siwtch.
The speed of the ports today is 1G, this way it would be possible to make a port channel and pass 2GB