cancel
Showing results for 
Search instead for 
Did you mean: 
Post a Question

Secondary IP address on a network inteface - SMB

Is it possible to configure a secondary IP address on a network interface on a SMB? Under the 'Supported and Unsupported Features' section in sk105380 article 'Alias / Secondary IP address' states that it is supported for both Centrally and Locally managed SMBs, but I can not find the syntax to configure in CLI or by using the Web GUI.

0 Kudos
7 Replies
Admin
Admin

Re: Secondary IP address on a network inteface - SMB

What's the specific use case here?

0 Kudos

Re: Secondary IP address on a network inteface - SMB

The client would like to move the layer 3 interface which contains 3 subnets from a switch to the newly installed gateway

0 Kudos
Admin
Admin

Re: Secondary IP address on a network inteface - SMB

The SK says this is NOT supported for ALL appliances (including SMB)

If you need to support multiple subnets, you need to one of:

  • Create a virtual switch for each subnet and assign a LAN port to that switch
  • Create a VLAN trunk on one LAN port and trunk it with a switch port with the same configuration
0 Kudos

Re: Secondary IP address on a network inteface - SMB

Update from SR 3-0641449281

"The feature requested is not possible and we have edited sk105380 as not supported."

Re: Secondary IP address on a network inteface - SMB

According to sk89980: Support for Sub-interfaces / Alias IP address / Secondary IP address in Check Point product..., support of Alias / Secondary IP is very limited in GAiA:

Gaia OS supports the configuration of Secondary IP addresses only on single Security Gateways. In all other releases/configurations (e.g., ClusterXL, Dynamic Routing), the use of Secondary IP addresses is not officially supported. If the physical machine does not have enough physical interfaces, then VLAN interfaces should be configured.

So i do not think that this is supported on GAiA Embedded without these limitations - if supported at all, maybe the sk105380 is rather speaking of VLANs...

0 Kudos

Re: Secondary IP address on a network inteface - SMB

I suspect it is not supported in GAiA embedded, I have a TAC case raised to confirm, currently with R&D

0 Kudos

Re: Secondary IP address on a network inteface - SMB

Thank you for having that confirmed !

0 Kudos