topic Re: How to properly delete an interface in a VS in Firewall and Security Management

How to properly delete an interface in a VS

Franktum — Fri, 14 Jun 2024 13:49:15 GMT

Hi,

We need to delete an interface in a VS and wanted to know whether the best way is to do it through SmartConsole by opening the cluster properties > Topology and delete the interface from there.

Is there any other thing we have to do?, for example to delete the interface through clish in every physical appliance?

Thanks in advanced

Regards

Re: How to properly delete an interface in a VS

Bob_Zimmerman — Fri, 14 Jun 2024 15:37:57 GMT

@Franktum wrote:
We need to delete an interface in a VS and wanted to know whether the best way is to do it through SmartConsole by opening the cluster properties > Topology and delete the interface from there.

That is the only way to delete an interface in VSX.

You should ideally make sure the interface isn't referenced by command line config, such as dynamic routing. Once an interface is deleted, some versions won't let you remove configuration like that which explicitly mentions it. The easiest way to confirm this is to go into the command line of each member of the VSX cluster and run this to dump the config and look for the interface:

clishScript=$(mktemp) echo "set virtual-system 123" >${clishScript} echo "show configuration" >>${clishScript} clish -f "${clishScript}" | sed -E 's/^Processing .+?\r//g' | grep "eth23.456" rm "${clishScript}"

Replace "123" with the VSID, and "eth23.456" with the interface you are about to delete. You can ignore static routes (those are all managed exclusively through SmartConsole), but you should look at any other references to the interface.

Re: How to properly delete an interface in a VS

the_rock — Fri, 14 Jun 2024 16:01:38 GMT

Maybe below helps?

Andy

https://sc1.checkpoint.com/documents/R81/WebAdminGuides/EN/CP_R81_CLI_ReferenceGuide/Topics-CLIG/VSXG/vsx_provisioning_tool-Removing-Interface-from-Virtual-Device.htm