topic Re: 1600 / 1800 ports in Spark Firewall (SMB)

1600 / 1800 ports

G_W_Albrecht — Fri, 29 Jan 2021 10:21:15 GMT

In 1600 / 1800 Appliance R80.20.XX Getting Started Guide we find details about interface speeds and specifications of the new models:

The 1600 adds a second WAN port and changes DMZ and WAN port to a combo port of SFP and RJ45 (SFP or RJ11 can be used) for up to 1000MbE. The LAN ports 1-16 support 10/100/1000MbE, LAN 1 and LAN 2 (Sync) also support 2.5GbE.

The 1800 has SSD storage (capacity?) and two redundant PSUs added to hardware. Most unusual: DMZ combo RJ45 port supports 10/100/1000/2500/5000MbE and 10GbE, SFP port supports 10GbE. The LAN ports 1-18 support 10/100/1000MbE, LAN 1 and LAN 2 (Sync) also support 2.5GbE. And we have a Management port that supports 10/100/1000MbE.

So my question is: We can use the 1800 DMZ port for 10GbE connection to the internet, and we even have LAN1 and LAN2 ports with 2.5GbE - but both WAN IFs are limited to 1000MbE. If the DMZ contains a server that is used very frequently from internal networks, it also would make sense to use it that way. But on 1600 only LAN 1 and LAN 2 support 2.5GbE, all other prts are limited to 1000MbE.

Any comments on the design decisions ?

Re: 1600 / 1800 ports

Chris_Atkinson — Fri, 29 Jan 2021 10:28:00 GMT

Is your question about LAN side 10Gbps connectivity or something else, interface bonding perhaps?

Re: 1600 / 1800 ports

G_W_Albrecht — Fri, 29 Jan 2021 11:16:14 GMT

More why the DMZ IF pair is choosen to offer the highest possible speed. Clearly, you can use every port as WAN port, so this is more about naming a port 8)

Re: 1600 / 1800 ports

Chris_Atkinson — Fri, 29 Jan 2021 12:30:34 GMT

Could be simply that its just what the SFP port chipset supports and nothing more than that but I'm only speculating until details become available post release.

That and for consistency with earlier models where the SFP port was also labelled DMZ I suppose.

Re: 1600 / 1800 ports

G_W_Albrecht — Fri, 29 Jan 2021 15:01:11 GMT

In 1800, there are three SFP ports, DMZ, WAN 1 and WAN 2 - but only DMZ SFP supports 10GbE, both WAN SFP ports are limited to 1000MbE.

But maybe only a documentation error, as this is stll EA phase...

Re: 1600 / 1800 ports

Chris_Atkinson — Fri, 29 Jan 2021 15:23:00 GMT

Indeed but I think we also need to consider this in the context of the appliance performance as you posted here previously:

https://community.checkpoint.com/t5/SMB-Appliances-and-SMP/SMB-1600-1800-rumours/m-p/107586

Re: 1600 / 1800 ports

PhoneBoy — Fri, 29 Jan 2021 17:46:09 GMT

I assume all of this is a function of what the various chipsets we’re using support.
Also keep in mind that the platform itself can’t support 10GB of throughput (especially with NGTX).

In any case, we are talking about the new appliances at Sales Kick Off with more formal, public announcements to be made at CPX.

Re: 1600 / 1800 ports

JLo — Fri, 06 Sep 2024 16:04:59 GMT

Hi,

I want to ask about the DMZ port for 1800 model, can it act as the Sync interface for a cluster?

Regards

Justin

Re: 1600 / 1800 ports

PhoneBoy — Fri, 06 Sep 2024 19:07:05 GMT

Far as I know, yes.