topic Are physical interfaces required for SDWAN blade like they are for ISP Redundancy in General Topics

Are physical interfaces required for SDWAN blade like they are for ISP Redundancy

Patrick_Taphorn — Tue, 31 Dec 2024 21:38:23 GMT

We are contemplating using the SDWAN blade instead of the ISP Redundancy feature for our perimeter gateway cluster (R81.20 JHF 79). Currently we have a load balancer outside the firewall handing the ISP redundancy for our three providers. We are thinking about having the firewall doing this redundancy functionality instead.

In the R81.20 documentation it states that for ISP Redundancy "You must connect each Cluster Member with a dedicated physical interface to each of the ISPs". Has anyone successfully used VLAN interfaces instead of dedicated physical interfaces for the ISP Redundancy feature? For example can I create a bond with three vlan interfaces (ISP1, ISP2, and ISP3) on both cluster nodes.

I looked through the SDWAN documentation and asked the Google machine, and cannot find similar requirements for the SDWAN blade. My assumption there is no such requirement since SDWAN can do more intelligent probing of the ISP circuits. Figured someone in the community would know for sure.

Thanks and Happy New Year to all!

Re: Are physical interfaces required for SDWAN blade like they are for ISP Redundancy

the_rock — Wed, 01 Jan 2025 03:10:27 GMT

I believe you can do so, but would verify with TAC for sure.

Happy New Year!

Andy

Re: Are physical interfaces required for SDWAN blade like they are for ISP Redundancy

AmirArama — Wed, 01 Jan 2025 09:19:52 GMT

Hi,

Quantum SD-WAN is supported on VLAN interfaces as well.

as mentioned in: https://support.checkpoint.com/results/sk/sk180605 --> supported capabilities

https://sc1.checkpoint.com/documents/Infinity_Portal/WebAdminGuides/EN/Quantum-SD-WAN-Admin-Guide/Content/Topics-SD-WAN/Guidelines.htm?tocpath=Getting%20Started%20with%20SD-WAN%20%7C_____4

Happy New Year