topic Limitations and best practices bond (port-channel) in Firewall and Security Management

Limitations and best practices bond (port-channel)

nãbru — Tue, 30 May 2023 12:38:13 GMT

guys

I would like to know if there is a limitation to make a channel port between two fw 3200 and a switch both with 1GB;

What are the restrictions?

Re: Limitations and best practices bond (port-channel)

the_rock — Tue, 30 May 2023 12:51:05 GMT

Personally, Im not aware of any issues, though I recall once customer was using really old Cisco switch and we had to disable IGMP snooping to make it work. Other than that, cant think of any problems I ever encountered.

Andy

Re: Limitations and best practices bond (port-channel)

Chris_Atkinson — Tue, 30 May 2023 14:12:36 GMT

To be clear the individual firewalls have their own bonds/port-channel on the switch side they do not share it.

Settings wise 802.3AD / LACP with Layer 3+4 hashing is common for bonds.

Refer also:

sk120684: No connectivity over VLAN interfaces configured on a Bond interface on Check Point Security Gateway

Re: Limitations and best practices bond (port-channel)

the_rock — Tue, 30 May 2023 15:48:51 GMT

Good reference sk Chris.

Andy