How to Remove an Interface from Checkpoint Firewall

[Byron_Kawane]

Hi,

I've read lots of documentation how to configure an interface but have not been able to find anything on what is the safest way to remove an interface and it's virtual interfaces from the checkpoint firewall.

In this case I would like to remove interface 11 

Here's the proposed commands basically in reverse order.

Can I remove eth11 from the virtual interface Topology Gui by selecting the Name and click Remove or do I need to select each field i.e. IPv4, Net Mask etc.

Any reference to documentation on how to remove virtual interfaces would be most helpful

Thank you kindly for any assistance.

[MartijnElzenaar]

I believe the following SK article will help you

Adding or removing an interface in ClusterXL High Availability topology might cause fail-over 

/Martijn

[_Val_]

In addition to what Martijn Elzenaar‌ recommends, 

do the following:
1. Delete the interface from Cluster Object by using Remove button. Do not push policy
2. Remove the interface on standby member via CLI or WebUI

3. Remove the interface on active cluster member

4. Push new policy

[Byron_Kawane]

Thank you Martijn, Valeri for your replies.

The Checkpoint SmartDashboard version is R77.3.

Martijin, Unfortunately I don't have "advanced access" to see the solution.

Valeri, 

So basically I can execute the cli commands then, need to remove the interfaces in the Cluster Properties Topology, in the following order (blue) and then push the policy:

Also, is there any updated documentation that outline the steps to remove virtual interfaces?

Thank you for your assistance!

[_Val_]

Yes, that's the idea. Other than standard admin guide, nothing else. Adding and removing interfaces on Gaia is covered in Gaia Admin guide, there rest is covered by ClusterXL Admin manual

[Byron_Kawane]

Thank you for all your assistance!