Getting error while trying to add /31 in VSX

[sushantjoshi]

I am trying to add /31 prefix in my new VSX environment. Is it a bug or something that VSX doesn't allow ?

Same /31 prefix is allowed to add in appliance based checkpoint .

[emmap · Accepted solution]

/31 is not supported in current VSX.

[sushantjoshi]

@emmap Thank you for the reply.

@the_rock @Lesley Any opinion guys? 

[the_rock]

I would trust what @emmap says. Let me see if its documented anywhere.

Andy

[Chris_Atkinson · Accepted solution]

See sk91020 which talks about support for /31 and says this does not apply to VSX

[the_rock]

Yup, I think I sent that as you were typing your answer 🙂

[the_rock · Accepted solution]

Dont see vsx listed below.

Andy

https://support.checkpoint.com/results/sk/sk91020

[Lesley]

What error do you get? And are you sure fw is already vsx? (vsx on \ vsx off)

Because if you try to add the interface while it is still normal gw I would indeed expect error. 

[sushantjoshi]

Hi @Lesley , yes the firewall was on VSX mode. Another interface in the same VSX was running fine but looks like /31 is not accepted in VSX environment but is definitely accepted in normal checkpoint appliance environment. We introduced a point-to-point RFC 1918 Private IP and then routed over the public IP using the private IP.