topic Re: Maestro R81.10 - Interface Distribution Issue in Hyperscale Firewall (Maestro)

Maestro R81.10 - Interface Distribution Issue

HeikoAnkenbrand — Wed, 29 Jun 2022 14:54:42 GMT

I have the issue in Maestro under R81.10 that I can not change the distribution of the interface in the security group.
The Distribution Mode is assigned to Auto-Topology (is not working in the General Mode). So this should be possible, right?

Here is a picture with the show command:

I have the same problem when I set the Distribution Mode for an interface:

Re: Maestro R81.10 - Interface Distribution Issue

Jochen_Hoechner — Thu, 30 Jun 2022 16:37:49 GMT

Hi,

this interface is assigned to the security group and has no VLAN configured?
did you try to check 'show distribution interface' then ? or [tab] key?

Thanks
Jochen

Re: Maestro R81.10 - Interface Distribution Issue

HeikoAnkenbrand — Fri, 01 Jul 2022 11:22:27 GMT

>>>this interface is assigned to the security group and has no VLAN configured?
yes
>>>did you try to check 'show distribution interface' then ? or [tab] key?
The [tab] key does not work and does not display an interface.

Re: Maestro R81.10 - Interface Distribution Issue

Lari_Luoma — Tue, 05 Jul 2022 14:37:43 GMT

@HeikoAnkenbrand
I'm checking this internally. I tested in the lab and got the same error. Will get back to you.

Re: Maestro R81.10 - Interface Distribution Issue

Jochen_Hoechner — Wed, 06 Jul 2022 11:52:43 GMT

Hi, I got no issues with R81.10 JHF Take 30.

[Global] FW-XXXXX > show distribution interface bond1.104 configuration
1_01:
policy-internal

1_02:
policy-internal

1_03:
policy-internal

1_04:
policy-internal

Re: Maestro R81.10 - Interface Distribution Issue

Lari_Luoma — Wed, 06 Jul 2022 15:04:22 GMT

Can you confirm if you had policy installed and the interfaces you tried to configured were in the topology? It appears that this might be the issue.

Re: Maestro R81.10 - Interface Distribution Issue

Lari_Luoma — Wed, 06 Jul 2022 18:25:39 GMT

I can confirm that the policy installation fixed the issue for us.

Re: Maestro R81.10 - Interface Distribution Issue

Jochen_Hoechner — Thu, 07 Jul 2022 09:17:59 GMT

Hi Lari, I confirm, system has a security policy.

It is logical: As long as the machine does not have a policy or initial policy, interfaces do not have a Topology.
As long as interfaces do not have a topology, their topology is 'undefined'.

The 'good old' asg if command will also not display interfaces as long as you do not have a policy.

Best
Jochen

Re: Maestro R81.10 - Interface Distribution Issue

Satya2021 — Mon, 24 Apr 2023 07:10:33 GMT

[Global] HO-GW-ch01-02> show distribution verification verbose
Test: Configuration: Local SGM: Orchestrator 1: Orchestrator 2: Result:
Mode per-port per-port per-port per-port Passed
L4 Mode on on on on Passed
Matrix Size 512 512 512 512 Passed
eth1-06 policy-external-l4 policy-external-l4 external-l4 -- Passed
eth1-07 policy-external-l4 policy-external-l4 external-l4 -- Passed
eth2-07 policy-external-l4 policy-external-l4 -- external-l4 Passed
eth2-06 policy-external-l4 policy-external-l4 -- external-l4 Passed

Matrix:
2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2,2

Matrix verification passed successfully

Verification passed successfully