topic Re: Bond with cisco switch in Firewall and Security Management

Bond with cisco switch

Sagar_Manandhar — Sun, 19 Nov 2017 03:46:16 GMT

hi,

I am trying to create the LACP between checkpoint and cisco switch. What configuration should be done in cisco switch, whether we need to make the mode on, active or passive . The CP is in cluster and 2 interfaces are bond from each CP to the switch with VIP.

Regards,

Sagar Manandhar

Re: Bond with cisco switch

Prashan_Attanay — Sun, 19 Nov 2017 05:35:40 GMT

Hi Sagar,

Please try this and let me know if it works for you

Cisco:.
interface <interface id>
switchport trunk encapsulation dot1q
switchport trunk allowed vlan <vlanid>
switchport mode trunk
channel-protocol lacp
channel-group 3<port-channel id> mode active
no shutdown
interface Port-channel<port-channel id>
switchport trunk encapsulation dot1q
switchport trunk allowed vlan <vlanid>
switchport mode trunk
no shut

If you use "on" Etherchannel, it is created only when another interface group in Etherchannel "on" mode

Re: Bond with cisco switch

Sagar_Manandhar — Tue, 21 Nov 2017 04:23:21 GMT

Done the configuration and is working.

Thank you

Re: Bond with cisco switch

Prashan_Attanay — Tue, 21 Nov 2017 04:32:47 GMT

Great. Sagar can you provide me checkpoint side configuration if it possible

Re: Bond with cisco switch

Sagar_Manandhar — Tue, 21 Nov 2017 04:39:49 GMT

CP-GW1> show bonding group 10
Bond Configuration
xmit-hash-policy layer2
down-delay 200
primary Not configured
lacp-rate slow
mode 8023AD
up-delay 100
mii-interval 100
Bond Interfaces
eth6
eth7