topic Re: Bonds in Firewall and Security Management

Bonds

C_M — Wed, 18 Mar 2020 15:16:05 GMT

Can we add another bond (two interfaces) to a policy in VSX? or add more interfaces to a bond?

Our current interfaces are being overwhelmed.

Re: Bonds

_Val_ — Wed, 18 Mar 2020 16:29:13 GMT

Yes you can, but this will cause some downtime.

First, you have to detach your current bond from a VS, add additional NIC to the bond, then re-attach.

Re: Bonds

Maarten_Sjouw — Wed, 18 Mar 2020 19:14:14 GMT

When you want to add a new bond interface all you need to do is connect ssh to the gateway(s), in clish set vsx off
now add the additional bond interface the do a set vsx on again.
Then go to the VSX-gateway/cluster object and got to the interfaces page, add the new bond interface and set the trunk to on when you need that. Push policy on the VSX gateway/cluster./
No downtime on this procedure.

Re: Bonds

HeikoAnkenbrand — Thu, 19 Mar 2020 06:33:04 GMT

THX to @Maarten_Sjouw.

Here are the steps:

set vsx off
add bonding group <bond number> interface <if_name 1>
add bonding group <bond number> interface <if_name 2>
>>> add more bond settings <<<
set interface <if_name> ipv4-address <IP_address> mask-length <mask_length>
set vsx on
save config

Re: Bonds

_Val_ — Thu, 19 Mar 2020 10:43:30 GMT

Correct, but the question was about adding more interfaces to the existing bond.

Re: Bonds

Maarten_Sjouw — Thu, 19 Mar 2020 10:57:23 GMT

Quote 'add another bond or add interfaces to existing bond' was the question.

Re: Bonds

_Val_ — Thu, 19 Mar 2020 11:03:52 GMT

Yes, I stand corrected 🙂