How to change the state of an interface on VSX

[Franktum]

Hi all:

We'd like to change the state of an interface in a VSX gateway but the option isn't available:

vsx-gateway:0> set interface bond1
auto-negotiation - Configure auto-negotiation
breakout-mode - Configure breakout-mode
comments - interface Comments
link-speed - interface link speed
links - Configuring the minimal number of required interfaces in a Bond Load Sharing interface on cluster members
monitor-mode - set monitor-mode for interfaces
multi-queue - Set interface multi-queue
rx-ringsize - Set receive buffer size for interface (Changing the ring size buffer might cause traffic interruption)
tx-ringsize - Set transmit buffer size for interface (Changing the ring size buffer might cause traffic interruption)

Happens the same with physical interface (eth1-01 for example).

However, in a non-VSX gateway you can:

non-vsx-gw> set interface bond1
[output supressed]
multi-queue - Set interface multi-queue
rx-ringsize - Set receive buffer size for interface (Changing the ring size buffer might cause traffic interruption)
state - interface State

Does someone know what would be the way to change the state on VSX?

Thanks!

[Chris_Atkinson]

Temporarily or are you wanting to remove it?

https://community.checkpoint.com/t5/Security-Gateways/Disabling-interface-on-VS/td-p/202410 

[Franktum]

We want to temporarily disable certain interfaces because it's a contingency appliance. We knew about disable VSX in order to change the state of the interface but, does it exist another way to do so without disabling VSX? What are the consequences of disabling it?

[Alex-]

Disabling VSX allows you to access all GAIA options but be mindful of how the appliances are defined in your VS0 object.

[Chris_Atkinson]

sk41798 & sk92311 should help explain some caveats

[emmap]

Typically we would recommended doing interface up/down on the switch side instead.