<?xml version="1.0" encoding="UTF-8"?>
<rss xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#" xmlns:taxo="http://purl.org/rss/1.0/modules/taxonomy/" version="2.0">
  <channel>
    <title>topic Re: Intel X710 10gbps NIC with Cisco Nexus LINK problem in General Topics</title>
    <link>https://community.checkpoint.com/t5/General-Topics/Intel-X710-10gbps-NIC-with-Cisco-Nexus-LINK-problem/m-p/87511#M17616</link>
    <description>&lt;P&gt;It could be due to LLDP or the transceiver you are using, see this excerpt from the third edition of my book:&lt;/P&gt;
&lt;LI-SPOILER&gt;
&lt;P&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Cisco Nexus Interoperability Tips&lt;/STRONG&gt;&lt;/FONT&gt;&lt;BR /&gt;&lt;BR /&gt;As someone who has done a lot of work with a variety of Cisco devices over the years,&lt;BR /&gt;and held many Cisco-related certifications including a CCNP at one time, it pains me to&lt;BR /&gt;write this section of the book. Unfortunately Cisco’s Nexus products in particular are&lt;BR /&gt;becoming increasingly picky about which third-party (i.e. not Cisco) NICs they will&lt;BR /&gt;operate with by default. This has led to odd stability &amp;amp; performance problems between&lt;BR /&gt;Check Point firewall appliances that employ advanced NICs such as those manufactured&lt;BR /&gt;by Mellanox. These are typically 25Gbps or faster cards installed into the expansion&lt;BR /&gt;slots of the newest Check Point appliances.&lt;BR /&gt;&lt;BR /&gt;If you have attached one of these Mellanox cards to a Cisco Nexus device and are&lt;BR /&gt;seeing carrier flaps on the interface, or better yet it refuses to link up at all (my personal&lt;BR /&gt;favorite), you may need to run these commands on the Cisco Nexus side to get things&lt;BR /&gt;working and stable:&lt;BR /&gt;&lt;BR /&gt;&lt;STRONG&gt;service unsupported-transceiver&lt;/STRONG&gt;&lt;BR /&gt;&lt;STRONG&gt;no lldp transmit&lt;/STRONG&gt;&lt;BR /&gt;&lt;STRONG&gt;no lldp receive&lt;/STRONG&gt;&lt;BR /&gt;&lt;BR /&gt;See these SKs for the latest updates: &lt;A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;amp;solutionid=sk117676&amp;amp;partition=Basic&amp;amp;product=Security" target="_self"&gt;sk117676&lt;/A&gt;: Is Link Layer Discovery Protocol&lt;BR /&gt;( LLDP ) supported on Gaia? and &lt;A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;amp;solutionid=sk163267&amp;amp;partition=Advanced&amp;amp;product=Enterprise" target="_self"&gt;sk163267&lt;/A&gt;: LLDP issue with Intel X710 10G NIC&lt;BR /&gt;connected to Cisco 5K Switches.&lt;BR /&gt;&lt;BR /&gt;In addition I’ve seen some rather odd auto-negotiation issues when attached to a&lt;BR /&gt;Cisco switchport, where the Check Point interface must be manually set to the desired&lt;BR /&gt;maximum speed instead of the default setting of “Auto”. Duplex negotiation is&lt;BR /&gt;mandatory in the Gigabit Ethernet specification, so doing this should not result in a&lt;/P&gt;
&lt;P&gt;dreaded duplex mismatch condition (covered later in this chapter), but hard-coding the&lt;BR /&gt;interface speed should only be done as a last resort if you can’t get link established.&lt;BR /&gt;&lt;BR /&gt;Finally, some devices such as the Cisco Nexus 7000 will drop multicast traffic that&lt;BR /&gt;uses a multicast MAC address, if it does not also use a “traditional” Class D multicast IP&lt;BR /&gt;address (224.0.0.0-239.255.255.255), which happens to be the default behavior for&lt;BR /&gt;ClusterXL. This situation will cause interface flaps in ClusterXL and lead to cluster&lt;BR /&gt;instability. See the following SK to change this behavior: &lt;A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;amp;solutionid=sk115142&amp;amp;partition=Advanced&amp;amp;product=ClusterXL," target="_self"&gt;sk115142&lt;/A&gt;: Switch drops&lt;BR /&gt;Check Point CCP packets when CCP is working in multicast mode.&lt;/P&gt;
&lt;/LI-SPOILER&gt;</description>
    <pubDate>Sun, 07 Jun 2020 13:00:32 GMT</pubDate>
    <dc:creator>Timothy_Hall</dc:creator>
    <dc:date>2020-06-07T13:00:32Z</dc:date>
    <item>
      <title>Intel X710 10gbps NIC with Cisco Nexus LINK problem</title>
      <link>https://community.checkpoint.com/t5/General-Topics/Intel-X710-10gbps-NIC-with-Cisco-Nexus-LINK-problem/m-p/87509#M17615</link>
      <description>&lt;P&gt;We need to replace our cluster gws.&lt;/P&gt;&lt;P&gt;we install gaia 3.10 R80.30 take 196 on 2x Dell R640 with X710 10gb NIC.&lt;/P&gt;&lt;P&gt;the nic have been correctly recognized by gaia but the 10g link to our nexus switch is down.&lt;/P&gt;&lt;P&gt;below the configurations&lt;/P&gt;&lt;P&gt;Nexus&lt;/P&gt;&lt;P&gt;interface Ethernet1/36&lt;BR /&gt;description TEMP FW&lt;BR /&gt;switchport&lt;BR /&gt;switchport access vlan 10&lt;BR /&gt;spanning-tree port type edge&lt;BR /&gt;flowcontrol receive on&lt;/P&gt;&lt;P&gt;speed 10000&lt;BR /&gt;no shutdown&lt;/P&gt;&lt;P&gt;transceiver is present&lt;BR /&gt;type is SFP-H10GB-AOC10M&lt;BR /&gt;name is CISCO-AVAGO&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;GAIA&lt;/P&gt;&lt;P&gt;set interface eth0 link-speed 10G/full&lt;BR /&gt;set interface eth0 state on&lt;BR /&gt;set interface eth0 auto-negotiation off&lt;BR /&gt;set interface eth0 mtu 1500&lt;BR /&gt;set interface eth0 ipv4-address 1.1.1.1 mask-length 24&lt;/P&gt;&lt;P&gt;&amp;nbsp;&lt;/P&gt;&lt;P&gt;Do we need particular dac cables?&lt;/P&gt;&lt;P&gt;any suggestions?&lt;/P&gt;&lt;P&gt;thank you&lt;/P&gt;</description>
      <pubDate>Sun, 07 Jun 2020 11:58:18 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/Intel-X710-10gbps-NIC-with-Cisco-Nexus-LINK-problem/m-p/87509#M17615</guid>
      <dc:creator>andy_currigan</dc:creator>
      <dc:date>2020-06-07T11:58:18Z</dc:date>
    </item>
    <item>
      <title>Re: Intel X710 10gbps NIC with Cisco Nexus LINK problem</title>
      <link>https://community.checkpoint.com/t5/General-Topics/Intel-X710-10gbps-NIC-with-Cisco-Nexus-LINK-problem/m-p/87511#M17616</link>
      <description>&lt;P&gt;It could be due to LLDP or the transceiver you are using, see this excerpt from the third edition of my book:&lt;/P&gt;
&lt;LI-SPOILER&gt;
&lt;P&gt;&lt;FONT size="4"&gt;&lt;STRONG&gt;Cisco Nexus Interoperability Tips&lt;/STRONG&gt;&lt;/FONT&gt;&lt;BR /&gt;&lt;BR /&gt;As someone who has done a lot of work with a variety of Cisco devices over the years,&lt;BR /&gt;and held many Cisco-related certifications including a CCNP at one time, it pains me to&lt;BR /&gt;write this section of the book. Unfortunately Cisco’s Nexus products in particular are&lt;BR /&gt;becoming increasingly picky about which third-party (i.e. not Cisco) NICs they will&lt;BR /&gt;operate with by default. This has led to odd stability &amp;amp; performance problems between&lt;BR /&gt;Check Point firewall appliances that employ advanced NICs such as those manufactured&lt;BR /&gt;by Mellanox. These are typically 25Gbps or faster cards installed into the expansion&lt;BR /&gt;slots of the newest Check Point appliances.&lt;BR /&gt;&lt;BR /&gt;If you have attached one of these Mellanox cards to a Cisco Nexus device and are&lt;BR /&gt;seeing carrier flaps on the interface, or better yet it refuses to link up at all (my personal&lt;BR /&gt;favorite), you may need to run these commands on the Cisco Nexus side to get things&lt;BR /&gt;working and stable:&lt;BR /&gt;&lt;BR /&gt;&lt;STRONG&gt;service unsupported-transceiver&lt;/STRONG&gt;&lt;BR /&gt;&lt;STRONG&gt;no lldp transmit&lt;/STRONG&gt;&lt;BR /&gt;&lt;STRONG&gt;no lldp receive&lt;/STRONG&gt;&lt;BR /&gt;&lt;BR /&gt;See these SKs for the latest updates: &lt;A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;amp;solutionid=sk117676&amp;amp;partition=Basic&amp;amp;product=Security" target="_self"&gt;sk117676&lt;/A&gt;: Is Link Layer Discovery Protocol&lt;BR /&gt;( LLDP ) supported on Gaia? and &lt;A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;amp;solutionid=sk163267&amp;amp;partition=Advanced&amp;amp;product=Enterprise" target="_self"&gt;sk163267&lt;/A&gt;: LLDP issue with Intel X710 10G NIC&lt;BR /&gt;connected to Cisco 5K Switches.&lt;BR /&gt;&lt;BR /&gt;In addition I’ve seen some rather odd auto-negotiation issues when attached to a&lt;BR /&gt;Cisco switchport, where the Check Point interface must be manually set to the desired&lt;BR /&gt;maximum speed instead of the default setting of “Auto”. Duplex negotiation is&lt;BR /&gt;mandatory in the Gigabit Ethernet specification, so doing this should not result in a&lt;/P&gt;
&lt;P&gt;dreaded duplex mismatch condition (covered later in this chapter), but hard-coding the&lt;BR /&gt;interface speed should only be done as a last resort if you can’t get link established.&lt;BR /&gt;&lt;BR /&gt;Finally, some devices such as the Cisco Nexus 7000 will drop multicast traffic that&lt;BR /&gt;uses a multicast MAC address, if it does not also use a “traditional” Class D multicast IP&lt;BR /&gt;address (224.0.0.0-239.255.255.255), which happens to be the default behavior for&lt;BR /&gt;ClusterXL. This situation will cause interface flaps in ClusterXL and lead to cluster&lt;BR /&gt;instability. See the following SK to change this behavior: &lt;A href="https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&amp;amp;solutionid=sk115142&amp;amp;partition=Advanced&amp;amp;product=ClusterXL," target="_self"&gt;sk115142&lt;/A&gt;: Switch drops&lt;BR /&gt;Check Point CCP packets when CCP is working in multicast mode.&lt;/P&gt;
&lt;/LI-SPOILER&gt;</description>
      <pubDate>Sun, 07 Jun 2020 13:00:32 GMT</pubDate>
      <guid>https://community.checkpoint.com/t5/General-Topics/Intel-X710-10gbps-NIC-with-Cisco-Nexus-LINK-problem/m-p/87511#M17616</guid>
      <dc:creator>Timothy_Hall</dc:creator>
      <dc:date>2020-06-07T13:00:32Z</dc:date>
    </item>
  </channel>
</rss>

