Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
mhurst
Explorer

Netmasks for CMA interfaces

We have an R80.40 MDS where the leading interface has a /28 netmask, and so do all of the CMA alias addresses on that interface.

 

We need the CMAs to have /24 netmasks.

 

Does anyone know if and where that can be configured?

 

Can't find anything relevant in the Checkpoint documentation.

0 Kudos
8 Replies
G_W_Albrecht
Legend
Legend

What do you mean by leading interface ? A SMS/MDS usually has only one interface that can be edited in GAiA WebGUI. You can use the information in the following SK, but only change the netmask, not the IP: sk74020: How to change the IP address of a Multi-Domain Server or a Domain Management Server?

0 Kudos
mhurst
Explorer

The interface of the MDS itself, i meant. Don't need to change that. Need to change the netmask on the CMA addresses aliased on that interface.  Was possible in R77. Need to do the same in R80.

0 Kudos
G_W_Albrecht
Legend
Legend

I would suggest to contact TAC to get this resolved.....

0 Kudos
S_E_
Advisor

Hi,

assuming your CMA/DMS are using the same IP address range as the MDS itself.

The netmask of MDS is used:

set interface <> ipv4-address <> mask-length <>

 

If you are using predefined pool range for CMA/DMS, no idea....

Regards

0 Kudos
mhurst
Explorer

Not using pre-defined pools. And CMA addresses are not in the same subnet as the MDS interface.

 

It does look like the CMA alias interfaces are using the same subnet as the MDS interface. I need them to use a different subnet.

 

Was possible in R77.

0 Kudos
the_rock
Mentor
Mentor

Does it not work what @S_E_  suggested?

0 Kudos
mhurst
Explorer

In secureplatform we resolved this by adding an entry in /etc/netmasks for the CMA subnet. Looking for equivalent functionality in Gaia.

0 Kudos
PhoneBoy
Admin
Admin

Please open a TAC case regarding this.

0 Kudos