Maestro Management Port - 1 Gb Copper

[starmen2000]

Hi Mates,

One of our customers wants to implement a management port on MHO (leading to the management server) using a 1Gb Copper (SFP 1Gb). However, I am aware that SG is sending all logs over this port, and the management server also establishes control connections through it.

I have two questions:

1. Do you think there is a limitation if a 1Gb Copper port is used on MHO for management purposes?

2. If we use a 10Gb port as the management port on MHO, and the management server still has a 1Gb port available, does it make sense?

Thanks

[Chris_Atkinson]

Which MHO and Gateways do you have?

For example with MHO170/175 this isn't possible.

[starmen2000]

MHO 140. I saw from one SK  that 1 Gb Port is possible on MHO. But I just wanted to know the limitations and also second issue, If we use a 10Gb port as the management port on MHO, and the management server still has a 1Gb port available, does it make sense?

[Chris_Atkinson]

How many gateway appliances / how much traffic and which model are those?

It could work if needed for a transition period but doesn't seem like a good medium term solution, but again we are missing  many details.

[starmen2000]

4 MHO-140 (Dual site) and total 4 Gateway Appliances (6200 Appliances) in a 1 SG. 

[emmap · Accepted solution]

1G is fine.

[delToro1]

Hello mate, i would recomend you at least using a magg interface for the management (1 port of 1G on each orquestrator). In this way you will have full redundancy if you lose one orchestrator for any reason.

https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_Gaia_AdminGuide/Topics-GAG/M...

BR!

[JozkoMrkvicka]

Check Point has finally started to sell new devices (19000 and 26000 family) with double on-board SYNC SFP ports and double on-board MGMT RJ45 ports. If there would be also MGMT ports as SFP capable to handle 10G (or more) SFPs, then it would be game changer for many customers.