- Products
- Learn
- Local User Groups
- Partners
- More
Quantum Spark Management Unleashed!
Introducing Check Point Quantum Spark 2500:
Smarter Security, Faster Connectivity, and Simpler MSP Management!
Check Point Named Leader
2025 Gartner® Magic Quadrant™ for Hybrid Mesh Firewall
HTTPS Inspection
Help us to understand your needs better
CheckMates Go:
SharePoint CVEs and More!
In SmartConsole, open the cluster, go to Network Management, open one of the interfaces, and go to the Advanced section. You can back the virtual interface with one interface name on one member and another name on the other member. That enables the process my team uses:
Proxy ARP entries will need to be updated to the new interface. That's easy enough, though. Just 'delete arp proxy ...' then 'add arp proxy ...' using the same command with the new interface name.
It gets a little more complicated if you have three or more members in the cluster, but not much. You just have to keep track of which members have been modified and take them one at a time.
Note that the interface named Mgmt is not special in any way other than its name. There is, however, a 'set management-interface' command in clish. The member must have one interface listed as the "management interface" in that command. All it does is prevent you from removing the IP, shutting down the interface, and other things which would likely break your ability to connect to the system. If the interface named Mgmt is set as your management interface, you will need to use 'set management-interface' to set it to some other interface before you will be able to remove the IP and stick it on the new bond.
Once your interfaces are moved to bonds, it's a lot easier to do this kind of thing in the future. For example, moving from 10g to 25g is purely command line: add the 25g interface to the bond, remove the 10g interface from the bond, done.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY