DMZ port join bond

[discountscott]

We have a 802.3ad bond of two LAN ports currently and would like to add the DMZ port to this bond, but have not had success doing so.

We attempted the following clish command:
DF-GATEWAY> set interface-bond LANBOND0 add-member dmz

But we receive an error:
Could not set interface network-ports: Invalid input for bond port

In the web GUI we also receive an error when attempting to do so.

Any suggestions??

[Chris_Atkinson · Accepted solution]

When assigned to a LAN, the WAN port can be used for any type of internal network except for a BOND network. The WAN port (like the DMZ port), can only be used for a BOND network as part of an internet (external) network.

Source: https://sc1.checkpoint.com/documents/SMB_R81.10.X/AdminGuides_Locally_Managed/EN/Content/Topics/Conf... 

[Edensh]

discountscott - Can you please share what is the reason you need to work with both DMZ and WAN?

[discountscott]

We currently have two bonds configured. WANBOND0 which goes to our router and LANBOND0 which goes to our stacked switches. We have the 802.3ad bond going to each switch so that during a rolling NSSU update on the switches connectivity is maintained. We recently added a 3rd switch to this stack (which only has SFP ports) and wanted to add it to the bond - we were trying to use the dmz port to achieve this.

[yagil]

Hi discountscott,

A LAN Bond can only use LAN ports.

A Bond over Internet connection (WAN Bond) can also use DMZ and WAN.