According to CP there is no way to achieve that, as we rad in
sk89980: Support for Sub-interfaces / Alias IP address / Secondary IP address in Check Point product...
Official statement:
- Gaia OS supports the configuration of Secondary IP addresses only on single Security Gateways.
- The use of Secondary IP addresses is not supported - neither in ClusterXL, nor in VRRP.
In all other releases/configurations (e.g., ClusterXL, Dynamic Routing), the use of Secondary IP addresses is not officially supported.
If the physical machine does not have enough physical interfaces, then VLAN interfaces should be configured.
CCSE / CCTE / CTPS / CCME / CCSM Elite / SMB Specialist