ClusterXL R8.20 Take 118 - Best way to move interface from 1Gb copper to 10Gb fiber ?

[Ruud]

Hi Guys,

I am looking in to upgrading the connection between our Internet switches and both nodes of a ClusterXL FW setup from the current 1Gb copper interfaces to 10Gb fiber interfaces.

My guess would be to remove the config of the copper port on the standby node, and then restore that config on the new fiber interface, then do a failover and repeat on the other node?

What is the proper/best procedure to achieve this with the least amount of downtime?

[Gaurav_Pandya]

Hi,

Please go through below thread. 

https://community.checkpoint.com/t5/Security-Gateways/Change-External-Interface-from-1G-to-10G/m-p/1...

[Bob_Zimmerman]

The steps you need depend on how your environment is set up. Is the interface a member of a bond, or are you using it directly?

If it's a member of a bond, the process is very easy. You add the new interface to the bond, remove the old interface from the bond, wait for the cluster to be happy again, then fail over and repeat the process on the other member. This is easy to do with zero traffic impact.

If it's not a member of a bond, the process is tedious. You'll need to build any new subinterfaces, move the CLI config over from the old subinterface to the new one, update the firewall object in SmartConsole to reflect the new interface names (it's in each cluster interface's Advanced section), push policy, wait for the cluster to be happy again, fail over, and repeat the process on the other member. If you have to do this, I highly, highly recommend moving to a bond so you never have to do it again. This can be done with zero traffic impact, but it's more complicated because there are so many things changing. Expect some downtime.