topic Re: Getting error while trying to add /31 in VSX in General Topics

Getting error while trying to add /31 in VSX

sushantjoshi — Thu, 08 Aug 2024 04:40:06 GMT

I am trying to add /31 prefix in my new VSX environment. Is it a bug or something that VSX doesn't allow ?

Same /31 prefix is allowed to add in appliance based checkpoint .

Re: Getting error while trying to add /31 in VSX

emmap — Thu, 08 Aug 2024 05:52:52 GMT

/31 is not supported in current VSX.

Re: Getting error while trying to add /31 in VSX

sushantjoshi — Sat, 10 Aug 2024 12:06:57 GMT

@emmap Thank you for the reply.

@the_rock @Lesley Any opinion guys?

Re: Getting error while trying to add /31 in VSX

the_rock — Sat, 10 Aug 2024 12:45:24 GMT

I would trust what @emmap says. Let me see if its documented anywhere.

Andy

Re: Getting error while trying to add /31 in VSX

Chris_Atkinson — Sat, 10 Aug 2024 12:51:38 GMT

See sk91020 which talks about support for /31 and says this does not apply to VSX

Re: Getting error while trying to add /31 in VSX

the_rock — Sat, 10 Aug 2024 12:52:16 GMT

Dont see vsx listed below.

Andy

https://support.checkpoint.com/results/sk/sk91020

Re: Getting error while trying to add /31 in VSX

the_rock — Sat, 10 Aug 2024 12:54:37 GMT

Yup, I think I sent that as you were typing your answer 🙂

Re: Getting error while trying to add /31 in VSX

Lesley — Sat, 10 Aug 2024 14:22:47 GMT

What error do you get? And are you sure fw is already vsx? (vsx on \ vsx off)

Because if you try to add the interface while it is still normal gw I would indeed expect error.

Re: Getting error while trying to add /31 in VSX

sushantjoshi — Wed, 04 Sep 2024 13:13:45 GMT

Hi @Lesley , yes the firewall was on VSX mode. Another interface in the same VSX was running fine but looks like /31 is not accepted in VSX environment but is definitely accepted in normal checkpoint appliance environment. We introduced a point-to-point RFC 1918 Private IP and then routed over the public IP using the private IP.