topic Re: How to change the state of an interface on VSX in Firewall and Security Management

How to change the state of an interface on VSX

Franktum — Thu, 22 Aug 2024 10:20:00 GMT

Hi all:

We'd like to change the state of an interface in a VSX gateway but the option isn't available:

vsx-gateway:0> set interface bond1
auto-negotiation - Configure auto-negotiation
breakout-mode - Configure breakout-mode
comments - interface Comments
link-speed - interface link speed
links - Configuring the minimal number of required interfaces in a Bond Load Sharing interface on cluster members
monitor-mode - set monitor-mode for interfaces
multi-queue - Set interface multi-queue
rx-ringsize - Set receive buffer size for interface (Changing the ring size buffer might cause traffic interruption)
tx-ringsize - Set transmit buffer size for interface (Changing the ring size buffer might cause traffic interruption)

Happens the same with physical interface (eth1-01 for example).

However, in a non-VSX gateway you can:

non-vsx-gw> set interface bond1
[output supressed]
multi-queue - Set interface multi-queue
rx-ringsize - Set receive buffer size for interface (Changing the ring size buffer might cause traffic interruption)
state - interface State

Does someone know what would be the way to change the state on VSX?

Thanks!

Re: How to change the state of an interface on VSX

Chris_Atkinson — Thu, 22 Aug 2024 10:41:05 GMT

Temporarily or are you wanting to remove it?

https://community.checkpoint.com/t5/Security-Gateways/Disabling-interface-on-VS/td-p/202410

Re: How to change the state of an interface on VSX

Franktum — Thu, 22 Aug 2024 11:03:01 GMT

We want to temporarily disable certain interfaces because it's a contingency appliance. We knew about disable VSX in order to change the state of the interface but, does it exist another way to do so without disabling VSX? What are the consequences of disabling it?

Re: How to change the state of an interface on VSX

Alex- — Thu, 22 Aug 2024 11:33:40 GMT

Disabling VSX allows you to access all GAIA options but be mindful of how the appliances are defined in your VS0 object.

Re: How to change the state of an interface on VSX

Chris_Atkinson — Thu, 22 Aug 2024 12:04:07 GMT

sk41798 & sk92311 should help explain some caveats

Re: How to change the state of an interface on VSX

emmap — Fri, 23 Aug 2024 00:33:43 GMT

Typically we would recommended doing interface up/down on the switch side instead.