topic Re: Maestro Management Port - 1 Gb Copper in Hyperscale Firewall (Maestro)

Maestro Management Port - 1 Gb Copper

starmen2000 — Mon, 05 Feb 2024 14:02:41 GMT

Hi Mates,

One of our customers wants to implement a management port on MHO (leading to the management server) using a 1Gb Copper (SFP 1Gb). However, I am aware that SG is sending all logs over this port, and the management server also establishes control connections through it.

I have two questions:

1. Do you think there is a limitation if a 1Gb Copper port is used on MHO for management purposes?

2. If we use a 10Gb port as the management port on MHO, and the management server still has a 1Gb port available, does it make sense?

Thanks

Re: Maestro Management Port - 1 Gb Copper

Chris_Atkinson — Mon, 05 Feb 2024 14:49:25 GMT

Which MHO and Gateways do you have?

For example with MHO170/175 this isn't possible.

Re: Maestro Management Port - 1 Gb Copper

starmen2000 — Mon, 05 Feb 2024 14:52:08 GMT

MHO 140. I saw from one SK that 1 Gb Port is possible on MHO. But I just wanted to know the limitations and also second issue, If we use a 10Gb port as the management port on MHO, and the management server still has a 1Gb port available, does it make sense?

Re: Maestro Management Port - 1 Gb Copper

Chris_Atkinson — Mon, 05 Feb 2024 14:58:55 GMT

How many gateway appliances / how much traffic and which model are those?

It could work if needed for a transition period but doesn't seem like a good medium term solution, but again we are missing many details.

Re: Maestro Management Port - 1 Gb Copper

starmen2000 — Mon, 05 Feb 2024 15:01:39 GMT

4 MHO-140 (Dual site) and total 4 Gateway Appliances (6200 Appliances) in a 1 SG.

Re: Maestro Management Port - 1 Gb Copper

emmap — Tue, 06 Feb 2024 05:12:12 GMT

1G is fine.

Re: Maestro Management Port - 1 Gb Copper

JozkoMrkvicka — Tue, 06 Feb 2024 06:49:03 GMT

Check Point has finally started to sell new devices (19000 and 26000 family) with double on-board SYNC SFP ports and double on-board MGMT RJ45 ports. If there would be also MGMT ports as SFP capable to handle 10G (or more) SFPs, then it would be game changer for many customers.

Re: Maestro Management Port - 1 Gb Copper

delToro1 — Tue, 06 Feb 2024 08:09:19 GMT

Hello mate, i would recomend you at least using a magg interface for the management (1 port of 1G on each orquestrator). In this way you will have full redundancy if you lose one orchestrator for any reason.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Gaia_AdminGuide/Topics-GAG/MAGG.htm?TocPath=Network%20Management%7CNetwork%20Interfaces%7C_____6

BR!