topic DMZ port join bond in Spark Firewall (SMB)

DMZ port join bond

discountscott — Tue, 09 May 2023 18:56:12 GMT

We have a 802.3ad bond of two LAN ports currently and would like to add the DMZ port to this bond, but have not had success doing so.

We attempted the following clish command:
DF-GATEWAY> set interface-bond LANBOND0 add-member dmz

But we receive an error:
Could not set interface network-ports: Invalid input for bond port

In the web GUI we also receive an error when attempting to do so.

Any suggestions??

Re: DMZ port join bond

Chris_Atkinson — Wed, 10 May 2023 02:53:39 GMT

When assigned to a LAN, the WAN port can be used for any type of internal network except for a BOND network. The WAN port (like the DMZ port), can only be used for a BOND network as part of an internet (external) network.

Source: https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/Configuring-Local-Network.htm

Re: DMZ port join bond

Edensh — Wed, 10 May 2023 11:49:17 GMT

discountscott - Can you please share what is the reason you need to work with both DMZ and WAN?

Re: DMZ port join bond

discountscott — Wed, 10 May 2023 12:13:48 GMT

We currently have two bonds configured. WANBOND0 which goes to our router and LANBOND0 which goes to our stacked switches. We have the 802.3ad bond going to each switch so that during a rolling NSSU update on the switches connectivity is maintained. We recently added a 3rd switch to this stack (which only has SFP ports) and wanted to add it to the bond - we were trying to use the dmz port to achieve this.

Re: DMZ port join bond

yagil — Wed, 10 May 2023 15:39:02 GMT

Hi discountscott,

A LAN Bond can only use LAN ports.

A Bond over Internet connection (WAN Bond) can also use DMZ and WAN.