- CheckMates
- :
- Products
- :
- Quantum
- :
- Security Gateways
- :
- VSX: Migrate Interfaces to 10G-Bond
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
VSX: Migrate Interfaces to 10G-Bond
Hey there
We are running a HA-Pair of two VSX12200 with 4 virtual firewalls in Load-Sharing-Mode (VSLS).
As of today, each of the virtual firewalls has his own dedicated 1G-Interface with a vlan-trunk.
- eth0: Vlan-Trunk (16 vlans), vfw-customer-01
- eth1: Vlan-Trunk (72 vlans), vfw-customer-02
- eth2: Vlan-Trunk (73 vlans), vfw-customer-03
- eth3: Vlan-Trunk (24 vlans), vfw-customer-04
- eth7: Sync
- Mgt: Management
- eth1-01: new 10G slave interface for bond1
- eth1-02: new 10G slave interface for bond1
We want to move all Vlans/Interfaces (excluding mgt & sync) to a new 10G Bond (2 slave interfaces).
According to the R80.10 documentation i would use the following procedure:
- CLI: Create new bond interface on both physical members (bond1, lacp/802.3ad)
- SmartConsole: Open Cluster-Object -> Physical Interfaces -> Add -> bond1, tick Vlan-Trunk
- SmartConsole: Open Cluster-Object -> Topology -> Open each slave interface properties (eth1-01, eth1-02) and select bond-interface
- SmartConsole: Install the Policy
- CLI: Reconfigure topology with "vsx_util change_interfaces" for each interface (eth0 -> bond1, eth1 -> bond1, ...)
- SmartConsole: Install the Policy
Am i missing something important or is this the way to move all Vlans to a new interface-bond?
At the moment, i can't see the eth1-01 and eth1-02 interfaces in topology view (see screenshot).
I assume they will show up, once the bond1 is created, correct?
Thanks and kind regards,
Christian
2 Replies
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I'll try to bump the thread back up and hope someone can answer my question. Thanks!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
When you add physical interfaces to your machine, then will NOT automagically be added to the topology, you need to add them manually, but as they are the interfaces used by your bond they do not need to be in the topology. Actually you don't even want them there.
Regards, Maarten
![](/skins/images/74119E49EB1AA30407316FFB9151D237/responsive_peak/images/icon_anonymous_message.png)