Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
valter_esjunior
Explorer
Explorer

Maestro Orchestrator Ports and Gaia OS Interfaces

Hi, all. 

 

Is there a reason or technical limitation why interfaces names on Gaia OS follow an "odd ports" scheme instead of use the same port name number used by Gaia? For exemple: The port "1/10/1" is identified as "eth1-19" instead "eth1-10".

Regards.

 

0 Kudos
6 Replies
emmap
MVP Gold CHKP MVP Gold CHKP
MVP Gold CHKP

It comes down to the ports being numbered sequentially on the front of the MHOs but the QSFP ports can be split into multiple ports. We don't want port 7 to change names if we split port 3 into four ports, so we number each port oddly like that so that there's space to do the splitting without affecting higher port names where applicable. 

valter_esjunior
Explorer
Explorer

But I thought splitting ports will affect only the port names on Gaia OS, like 1/3/1, 1/3/2, and so on. Could you give me an example, please?

 

Regards

0 Kudos
Chris_Atkinson
MVP Diamond CHKP MVP Diamond CHKP
MVP Diamond CHKP

See the explanations section here for an example:

https://sc1.checkpoint.com/documents/Appliances/GSG_Maestro/EN/Topics/Splitting-Ports-with-Breakout-...

 

CCSM R77/R80/ELITE
valter_esjunior
Explorer
Explorer

It still not clear for me. This port scheme is specific for MHO 140 and 170? And is it specific for uplink ports? What should happen if, for example, I split the port 29, that is the last port available for splitting?

Regards. 

0 Kudos
emmap
MVP Gold CHKP MVP Gold CHKP
MVP Gold CHKP

If you split port 29, you'll have ports 1/29/1, 1/29/2, 1/29/3 and 1/29/4 available. If they are all set to be uplinks and assigned to your security group, you'll have eth1-57, eth1-58, eth1-59 and eth1-60 available inside the security group.

The port schemes are different for each model of MHO due to their individual layouts and splitting options. MHO-140 has 48 SFP ports that cannot be split, so they are numbered the same in SG Gaia as they are in MHO. The 8 QSFP ports can have the top row split, so they go up by 2 in SG Gaia. MHO-170 is all QSFP and the top row can be split, so they go up by 2. In both of these cases, splitting a top row port disables the port below it. MHO-175 is also all QSFP port but they all can be split, so their numbers go up by 4 each time.

The unsplit port names are all laid out here: https://sc1.checkpoint.com/documents/Appliances/GSG_Maestro/EN/Topics/Orchestrator-Ports-and-Gaia-OS... 

0 Kudos
Lari_Luoma
MVP Platinum CHKP MVP Platinum CHKP
MVP Platinum CHKP

Adding to what Emma said...
MHOs use physical port numbers in the format: MHO #/port # / split #
So for example if you use a 10G splitter in the first port of MHO-175 the port the port numbers would become
1/1/1, 1/1/2, 1/1/3 and 1/1/3

Logically those ports would be named eth1-Mgmt1 - eth1-Mgmt4. Security Group uses logical names only.

R82+ shows both fysical and logical port numbers.
Screenshot 2026-09-24 at 10.09.44 PM.png

0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events