VXLAN and SDWAN ?

[Andreas_Aust2]

When do we have VXLAN and SDWAN ?

[PhoneBoy]

For SDWAN we have partnerships with Velocloud and Silverpeak.

More is planned here as well.

https://www.checkpoint.com/downloads/product-related/solution-brief/sb-checkpoint-silver-peak.pdf 

https://www.checkpoint.com/downloads/product-related/solution-brief/sb-checkpoint-velocloud.pdf 

VXLAN is not in the near term plans.

[Aidan_Luby]

I've been looking at SDWAN a lot lately and I think what I'm looking for most is some sort of case study or stickied post on this sub-forum of a customer implementing a CheckPoint SDWAN solution including the rationale for the setup, the challenges and the benefits in the end.

[PhoneBoy]

Hi, just to update, it appears that VXLAN support is planned for the R80.20 Gateway release.

Recommend getting involved with the Production EA: R80.20 EA for Gateway with Linux 3.10 Kernel Coming Soon‌

[Pablo_Barriga]

Hello , Vxlan es an overlay technology, would be great to have support on Check Point, I'm currently using in it on Vmware NSX, Is there any manual for the integration with Velocloud, I have some edge and branch that I can test those features.

[Olga_Kuts]

Hello!

Are there any updates regarding to VXLAN? I cannot find any information about this in R80.20 Release.

[PhoneBoy]

If it did end up getting released, it would be in the releases with the 3.10 kernel.

[Olga_Kuts]

Hello!

Do you have any news about VXLAN? As I understand 3.10 kernel is released.

[PhoneBoy]

As far as I know, it's not in R80.40.

[John_Fleming]

cough cough cough

[Expert@gw-450c00:0]# pwd
/lib/modules/3.10.0-957.21.3cpx86_64
[Expert@gw-450c00:0]# fw ver
This is Check Point's software version R80.40 - Build 685
[Expert@gw-450c00:0]# find . -iname "*vxlan*"
./kernel/drivers/net/vxlan.ko
./kernel/net/openvswitch/vport-vxlan.ko
[Expert@gw-450c00:0]#

[PhoneBoy]

Having drivers for it available and having proper support for it in Gaia and the Security Gateway are different beasts.

That said, a search on SK netted something:
https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut...
That suggests, maybe, there is some level of support, at least in CloudGuard IaaS.

If not, it looks like one of our SEs' created a tool to potentially manage vxlan interfaces.
Falls under the "unsupported" category.
https://github.com/joe-at-cp/CPVXLANManager