Netmasks for CMA interfaces

[mhurst]

We have an R80.40 MDS where the leading interface has a /28 netmask, and so do all of the CMA alias addresses on that interface.

We need the CMAs to have /24 netmasks.

Does anyone know if and where that can be configured?

Can't find anything relevant in the Checkpoint documentation.

[G_W_Albrecht]

What do you mean by leading interface ? A SMS/MDS usually has only one interface that can be edited in GAiA WebGUI. You can use the information in the following SK, but only change the netmask, not the IP: sk74020: How to change the IP address of a Multi-Domain Server or a Domain Management Server?

[mhurst]

The interface of the MDS itself, i meant. Don't need to change that. Need to change the netmask on the CMA addresses aliased on that interface.  Was possible in R77. Need to do the same in R80.

[G_W_Albrecht]

I would suggest to contact TAC to get this resolved.....

[S_E_]

Hi,

assuming your CMA/DMS are using the same IP address range as the MDS itself.

The netmask of MDS is used:

set interface <> ipv4-address <> mask-length <>

If you are using predefined pool range for CMA/DMS, no idea....

Regards

[mhurst]

Not using pre-defined pools. And CMA addresses are not in the same subnet as the MDS interface.

It does look like the CMA alias interfaces are using the same subnet as the MDS interface. I need them to use a different subnet.

Was possible in R77.

[the_rock]

Does it not work what @S_E_  suggested?

[mhurst]

In secureplatform we resolved this by adding an entry in /etc/netmasks for the CMA subnet. Looking for equivalent functionality in Gaia.

[PhoneBoy]

Please open a TAC case regarding this.