topic Re: VLAN Monitoring on BOND for specific VLAN interface in Firewall and Security Management

VLAN Monitoring on BOND for specific VLAN interface

Mighty_Lux_15 — Wed, 24 May 2023 14:30:48 GMT

Hello,

I'm planing to change the monitored VLAN on CLusterXL.

Platform : Check Point 6700
R81.10 take 335

I'm following this sk92784=> https://support.checkpoint.com/results/sk/sk92784#

According to the SK, it is needed to modify the following file $FWDIR/conf/cpha_specific_vlan_data.conf as below :

NAME_OF_PHYSICAL_INTERFACE_1	VLAN_ID_to_be_MONITORED
NAME_OF_PHYSICAL_INTERFACE_2	VLAN_ID_to_be_MONITORED
NAME_OF_PHYSICAL_INTERFACE_3	VLAN_ID_to_be_MONITORED

Example - monitor VLAN 2 on eth3, and VLAN 7 on eth5:

eth3	2
eth5	7

The thing is that i'm using 2 bonds (802.3ad) with 2 interfaces :
bond 1 : eth1-01 & eth1-02
bond 2: eth1-03 & eth1-04

The documentation does not mention anything about bond.

I would like to monitor VLAN 40 on the bond 1 and VLAN 50 on bond 2
I am wondering if the following lines would do the trick or if I should put the name of the bond instead :

eth1-01	40
eth1-02	40
eth1-03 50
eth1-04 50

Your help / confirmation would be greatly appreciated.

Regards,
ML15

Re: VLAN Monitoring on BOND for specific VLAN interface

PhoneBoy — Tue, 30 May 2023 16:17:16 GMT

I believe you specify the bond interface in this case.

Re: VLAN Monitoring on BOND for specific VLAN interface

Mighty_Lux_15 — Tue, 30 May 2023 16:54:15 GMT

Hello,

Thank you for your input.

As sugested, I'll try the following :

bond1	40
bond2	50

I'll let you know the outcome.

Regards,
ML15

Re: VLAN Monitoring on BOND for specific VLAN interface

Bob_Zimmerman — Tue, 30 May 2023 18:00:35 GMT

This is correct. When using bonding, the raw Ethernet interfaces won't have IPs (or even subinterfaces for the various VLANs), so they won't be able to talk to each other via CCP.

Re: VLAN Monitoring on BOND for specific VLAN interface

ajsingh — Tue, 28 Nov 2023 18:20:05 GMT

Hi,

Hope all is well. I have similar question but little different requirement :
I have 2 vlans on one Physical interface. Will the enteries be looking like this then :
eth2 20

eth2 30

I am just confused on syntax for interfaces with more than 1 VLAN on it.

Thank you

Re: VLAN Monitoring on BOND for specific VLAN interface

emmap — Wed, 29 Nov 2023 05:48:35 GMT

Yes, you add each VLAN you wish to monitor as a separate line as you have there.

Re: VLAN Monitoring on BOND for specific VLAN interface

ajsingh — Wed, 29 Nov 2023 14:32:54 GMT

Awesome thank you