- Products
- Learn
- Local User Groups
- Partners
- More
Step Into the Future of
AI-Powered Cyber Security
What's New in R82.10?
Register HereWhen the Agents Attack
A Live Look at Agentic Exposure Validation
AI Security Masters E8:
Claude Mythos: New Era in Cyber Security
CheckMates Go:
CheckMates Fest
Hi Team,
Good day
I am trying to understand what this statement means?
Load Sharing (Active/Active): All interfaces are active, but handle different connections simultaneously. Traffic is balanced amongst subordinate interfaces to maximize throughput. The Load Sharing option does not support switch redundancy
What are the limitations on switch side if we configure load sharing? The switches are Arista switches.
Thanks
ftom the AI:
No Switch Redundancy in Load Sharing:
If you use Load Sharing mode for your bond, the system will not automatically switch over to a backup switch if the primary switch fails.
If you use HA, you have redundancy - if one switch port fails, the other from the Bond will take over. With Load sharing, both ports of the Bond are in use, so there is no redundancy !
Also, to add to all this, though its another AI answer, but see below things listed for limitrations.
Andy
**********************************
When configuring load sharing on a switch—particularly in the context of EtherChannel (link aggregation) or port-channel-based load balancing—there are several limitations you should be aware of on the switch side:
Static algorithms: Most switches use static load balancing algorithms (e.g., based on source/destination MAC/IP/port). These do not adapt dynamically to traffic load.
Uneven distribution: If traffic flows share the same hash result (e.g., same source/destination IP), they may all use the same physical link, leading to underutilization of other links.
No per-packet balancing: To preserve packet order, most switches use per-flow hashing rather than per-packet, limiting fine-grained load sharing.
Hashing method limitations: Lower-end switches may only support a limited set of hashing options (e.g., only source MAC or IP).
ASIC capabilities: Some switches have hardware ASICs that determine how flexible or efficient load balancing can be.
Mismatch with other devices: Load sharing policies (e.g., Cisco vs HP vs Juniper) can differ, leading to asymmetrical traffic or link failures if not configured compatibly.
Inconsistent hashing: If two ends of a link aggregate use different hashing criteria, packet ordering and throughput issues can occur.
All member links should ideally be identical in speed and duplex. Otherwise, the load-sharing may favor faster links, which may still lead to congestion if not managed properly.
Single-flow sessions (like large TCP transfers) can't be split across links, which limits the usefulness of load sharing in some scenarios.
Latency-sensitive traffic may be affected if not evenly distributed.
If a physical link fails, the switch reroutes traffic to other links. However, reconvergence isn’t always instant and may briefly disrupt traffic.
ftom the AI:
No Switch Redundancy in Load Sharing:
If you use Load Sharing mode for your bond, the system will not automatically switch over to a backup switch if the primary switch fails.
If you use HA, you have redundancy - if one switch port fails, the other from the Bond will take over. With Load sharing, both ports of the Bond are in use, so there is no redundancy !
The guys are 100% right, thats exactly it.
Andy
Also, to add to all this, though its another AI answer, but see below things listed for limitrations.
Andy
**********************************
When configuring load sharing on a switch—particularly in the context of EtherChannel (link aggregation) or port-channel-based load balancing—there are several limitations you should be aware of on the switch side:
Static algorithms: Most switches use static load balancing algorithms (e.g., based on source/destination MAC/IP/port). These do not adapt dynamically to traffic load.
Uneven distribution: If traffic flows share the same hash result (e.g., same source/destination IP), they may all use the same physical link, leading to underutilization of other links.
No per-packet balancing: To preserve packet order, most switches use per-flow hashing rather than per-packet, limiting fine-grained load sharing.
Hashing method limitations: Lower-end switches may only support a limited set of hashing options (e.g., only source MAC or IP).
ASIC capabilities: Some switches have hardware ASICs that determine how flexible or efficient load balancing can be.
Mismatch with other devices: Load sharing policies (e.g., Cisco vs HP vs Juniper) can differ, leading to asymmetrical traffic or link failures if not configured compatibly.
Inconsistent hashing: If two ends of a link aggregate use different hashing criteria, packet ordering and throughput issues can occur.
All member links should ideally be identical in speed and duplex. Otherwise, the load-sharing may favor faster links, which may still lead to congestion if not managed properly.
Single-flow sessions (like large TCP transfers) can't be split across links, which limits the usefulness of load sharing in some scenarios.
Latency-sensitive traffic may be affected if not evenly distributed.
If a physical link fails, the switch reroutes traffic to other links. However, reconvergence isn’t always instant and may briefly disrupt traffic.
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 27 | |
| 12 | |
| 6 | |
| 5 | |
| 5 | |
| 5 | |
| 5 | |
| 4 | |
| 4 | |
| 3 |
Tue 16 Jun 2026 @ 05:00 PM (CEST)
Under the Hood: Check Point SASE | Internet Access Optimization & Performance TuningThu 18 Jun 2026 @ 10:00 AM (CEST)
The Cloud Architects Series: Check Point WAF - The Next Generation of AI powered protectionTue 23 Jun 2026 @ 05:00 PM (CEST)
Under the Hood: Check Point Cloud Firewall | Securing all of your clouds: Art of the possibleTue 16 Jun 2026 @ 05:00 PM (CEST)
Under the Hood: Check Point SASE | Internet Access Optimization & Performance TuningThu 18 Jun 2026 @ 10:00 AM (CEST)
The Cloud Architects Series: Check Point WAF - The Next Generation of AI powered protectionTue 23 Jun 2026 @ 05:00 PM (CEST)
Under the Hood: Check Point Cloud Firewall | Securing all of your clouds: Art of the possibleThu 25 Jun 2026 @ 10:00 AM (PDT)
AI Security Masters E10: READY OR NOT: Securing the AI Enterprise 2/5 - AI Red TeamingAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY