topic Re: R81.10 PBR cannot create more than 1024 in Firewall and Security Management

R81.10 PBR cannot create more than 1024

klcomzzz — Thu, 08 Jun 2023 10:29:15 GMT

Hi,

We have a CP Cluster with R80.20 it has PBR with Priority configured till 6000. but after Upgrading to R81.10 Gateway shows we can only add 1024 rules.

Kindly advise how to resolve this. we have more than 1024 PBR in one of our clusters.

EW-INT-KL02> set pbr rule priority 7250 matches from 10.10.29.0/29

CLINFR0409 Invalid number: 7250. Not in range 1..1024.

set pbr rule priority 7250

-------------^^^^^^^^^^^^^

EW-INT-KL02>

Thank you.

Re: R81.10 PBR cannot create more than 1024

PhoneBoy — Thu, 08 Jun 2023 23:39:32 GMT

Unfortunately, this is an unsupported configuration per: https://support.checkpoint.com/results/sk/sk180301
For formal support of this many PBRs, you're going to need to work with your local Check Point office on an RFE.

Re: R81.10 PBR cannot create more than 1024

Daniel_Szydelko — Mon, 17 Jun 2024 04:41:01 GMT

Do you know the reason of such change? It was supported till R81 and now it's not for some reason. It's not funny when you need to migrate gateways with large number of PBR rules using wide range (for flexibility) of priority numbers.

Daniel.