2-Port Dual-Width 10/25/40/100G QSFP28 Card

This section uses these abbreviations:

Full Name

Description

Abbreviation

2-Port Dual-Width 10/25/40/100G QSFP28 Card

A dual-width NIC that takes two slots in the appliance (specific pairs of slots).

100G Card

10/25/40/100G QSFP28 Port

Port type on the dual-width NIC.

100G Port

These appliance models use the 2-Port Dual-Width 10/25/40/100G QSFP28 Card:

Appliance Model

Hardware Acceleration

Software

Requirements

QLS800, QLS650, QLS450, QLS250

Supported

sk176466

MLS200

Supported

sk176466

28000

Not supported

sk152733

26000

Not supported

sk152733

16200, 16000

Not supported

sk152733

7000

Not supported

sk139932

6900

Not supported

sk139932

Front Panel

Legend

Item

LED

Description

1

Link Speed LED

  • Off - No link                                                                                                 

  • On (Green) - 100 Gbit/s data rate is selected

2

Link Speed LED

  • Off - No link

  • On (Blue) - 40/25/10 Gbit/s data rate is selected

3

Port Activity

  • Off - No activity

  • On (Amber) - Link exists

  • Blinking (Amber) - Activity

Installing a 2-Port Dual-Width 10/25/40/100G QSFP28 Card

Note - In the MLS400 model, these ports are built-in.

  1. Turn off the Appliance.

    See the Getting Started Guide for your model:

  2. Remove the power cords from the Power Supply Units.

  3. Loosen the screws on two horizontally adjacent dummy panels on the front of the Appliance.

    Important - See the mapping of supported adjacent slots.

  4. Remove the two horizontally adjacent dummy panels.

    Example for a 1U Appliance:

  5. Remove the slot divider.

    In a 1U Appliance

    In 2U and 3U Appliances

    1. Squeeze the recessed tabs on the front left side of the slot divider to release the latching mechanism.

    2. Pull the slot divider to remove it.

    1. Insert a finger into the slot divider hole.

    2. Push the latch trigger with your finger tab inside the hole to release the latching mechanism.

    3. Pull the slot divider with your finger to remove it.

    Example:

    Example for a 3U Appliance:

  6. Insert the 100G Card into the expansion slot.

    Example for a 3U Appliance:

  7. Push until the card clicks into position.

    Note - Make sure the card is firmly inserted on all sides and that the 100G Card front panel is flat against the appliance's front panel.

  8. Tighten the screws on the 100G Card.

  9. Turn on the Appliance.

    See the Getting Started Guide for your model:

Removing a 2-Port Dual-Width 10/25/40/100G QSFP28 Card

Note - In the MLS400 model, these ports are built-in.

  1. Turn off the Appliance.

    See the Getting Started Guide for your model:

  2. Remove the power cords from the Power Supply Units.

  3. Loosen the captive screws on the 100G Card.

  4. Holding the screws, pull the 100G Card out of the expansion slot.

    Example for a 3U Appliance:

  5. Insert the slot divider and push it until its latching mechanism clicks.

    Example for a 1U Appliance:

     

    Example for a 3U Appliance:

     

  6. Put the two dummy panels on the expansion slot.

    Example for a 1U Appliance:

  7. Tighten the screws on each dummy panel.

  8. Turn on the Appliance.

    See the Getting Started Guide for your model:

Configuring and Monitoring the 100G Ports

Mapping of 100G Ports and Interface Names in Gaia OS

  • The 100G Card takes two consecutive interface names in Gaia OS.

    In addition, the 100G Card reserves the second NIC slot's numbering.

    See the slot diagram in the corresponding section for your appliance model.

    If this card is installed in a LightSpeed Appliance in Slots 1+2 of the appliance, then in Gaia OS, the names of ports are eth1-01 and eth1-02.

    If this card is installed in a LightSpeed Appliance in Slots 3+4 of the appliance, then in Gaia OS, the names of ports are eth3-01 and eth3-02.

  • You can move the installed cards from their default slots to different slots.

    The 100G Card supports only specific pairs of slots.

  • Non-Maestro configuration refers to the connection of Security Appliances directly to your network and to the Check Point Management Server.

  • Maestro configuration refers to the connection of Security Appliances to a Quantum Maestro Orchestrator that in turn connects to your network and to the Check Point Management Server.

    To connect to Quantum Maestro Orchestrators, you must use only the 100G Ports.

    It is not supported to connect other ports to Orchestrators.

    It is not necessary to remove other cards from the appliance.

    The appliance ignores other cards when it operates as a Maestro Security Group Member.

Note - On this appliance model, hardware acceleration of traffic forwarding is supported.

Slot Diagram for Line Cards on the Front Panel (from left to right, from top to bottom):

1

2

3

4

5

6

7

8

Interface Names in Gaia OS:

By default, this appliance model has these cards installed:

Slots

Card

Names of Ports in Gaia OS -

Non-Maestro configuration

1 + 2

100G Card

eth1-01

eth1-02

(eth2-01:0<Y> are reserved)

3 + 4

100G Card

eth3-01

eth3-02

(eth4-01:0<Y> are reserved)

5 + 6

100G Card

eth5-01

eth5-02

(eth6-01:0<Y> are reserved)

7 + 8

100G Card

eth7-01

eth7-02

(eth8-01:0<Y> are reserved)

Note - On this appliance model, hardware acceleration of traffic forwarding is supported.

Slot Diagram for Line Cards on the Front Panel (from left to right, from top to bottom):

1

2

3

4

5

6

7

8

Interface Names in Gaia OS:

By default, this appliance model has these cards installed:

Slots

Card

Names of Ports in Gaia OS -

Non-Maestro configuration

1 + 2

100G Card

eth1-01

eth1-02

(eth2-01:0<Y> are reserved)

3 + 4

100G Card

eth3-01

eth3-02

(eth4-01:0<Y> are reserved)

5 + 6

100G Card

eth5-01

eth5-02

(eth6-01:0<Y> are reserved)

7

10G Card

eth7-01

eth7-02

eth7-03

eth7-04

8

10G Card

eth8-01

eth8-02

eth8-03

eth8-04

Note - On this appliance model, hardware acceleration of traffic forwarding is supported.

Slot Diagram for Line Cards on the Front Panel (from left to right, from top to bottom):

1

2

3

4

5

6

7

8

Interface Names in Gaia OS:

By default, this appliance model has these cards installed:

Slots

Card

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1 + 2

100G Card

eth1-01

eth1-02

(eth2-01:0<Y> are reserved)

ethsBP1-01

ethsBP1-02

3 + 4

100G Card

eth3-01

eth3-02

(eth4-01:0<Y> are reserved)

ethsBP1-03

ethsBP1-04

5

10G Card

eth5-01

eth5-02

eth5-03

eth5-04

These ports are not supported

6

10G Card

eth6-01

eth6-02

eth6-03

eth6-04

These ports are not supported

7

Empty

N / A

N / A

8

Empty

N / A

N / A

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

Important - You can connect a maximum of two 100G Cards at the same time to each Orchestrator.

Example for two 100G Cards in Slots 1 + 2 and Slots 3 + 4:

  • The first port on the first card (Slots 1 + 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slots 1 + 2) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slots 3 + 4) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slots 3 + 4) connects to one of the Downlink ports on the second Orchestrator

Note - On this appliance model, hardware acceleration of traffic forwarding is supported.

Slot Diagram for Line Cards on the Front Panel (from left to right):

1

2

3

4

Interface Names in Gaia OS:

By default, this appliance model has these cards installed:

Slots

Card

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1 + 2

100G Card

eth1-01

eth1-02
(eth2-01:0<Y> are reserved)

ethsBP1-01

ethsBP1-02

3

10G Card

eth3-01

eth3-02

eth3-03

eth3-04

These ports are not supported

4

10G Card

eth4-01

eth4-02

eth4-03

eth4-04

These ports are not supported

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

  • The first port on the card connects to one of the Downlink ports on the first Orchestrator

  • The second port on the card connects to one of the Downlink ports on the second Orchestrator

Note - On this appliance model, hardware acceleration of traffic forwarding is supported.

Slot Diagram for the Front Panel (from left to right):

1

2

On-board

ports (x8)

Interface Names in Gaia OS:

By default, this appliance model has these cards installed and ports:

Slots

Card /

Port Type

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1 + 2

100G Card

eth1-01

eth1-02

(eth2-01:0<Y> are reserved)

ethsBP1-01

ethsBP1-02

On-board

On-board (x8)

eth1

eth2

eth3

eth4

eth5

eth6

eth7

eth8

These ports are not supported

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

  • The first port on the card connects to one of the Downlink ports on the first Orchestrator

  • The second port on the card connects to one of the Downlink ports on the second Orchestrator

Note - On this appliance model, hardware acceleration of traffic forwarding is not supported.

Slot Diagram for Line Cards on the Front Panel (from left to right, from top to bottom):

1

2

3

4

5

6

7

8

This appliance model supports a maximum of four cards.

Interface Names in Gaia OS:

Slots

Card

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1 + 2

100G Card

eth1-01

eth1-02

(eth2-01:0<Y> are reserved)

ethsBP1-01

ethsBP1-02

3 + 4

100G Card

eth3-01

eth3-02

(eth4-01:0<Y> are reserved)

ethsBP1-03

ethsBP1-04

5 + 6

100G Card

eth5-01

eth5-02

(eth6-01:0<Y> are reserved)

ethsBP1-05

ethsBP1-06

7 + 8

100G Card

eth7-01

eth7-02

(eth8-01:0<Y> are reserved)

ethsBP1-07

ethsBP1-08

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

Important - You can connect a maximum of two 100G Cards at the same time to each Orchestrator.

Example for two 100G Cards in Slots 1 + 2 and Slots 3 + 4:

  • The first port on the first card (Slots 1 + 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slots 1 + 2) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slots 3 + 4) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slots 3 + 4) connects to one of the Downlink ports on the second Orchestrator

Note - On this appliance model, hardware acceleration of traffic forwarding is not supported.

Slot Diagram for Line Cards on the Front Panel (from left to right):

1

2

3

4

This appliance model supports a maximum of two cards.

Interface Names in Gaia OS:

Slots

Card

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1 + 2

100G Card

eth1-01

eth1-02
(eth2-01:0<Y> is reserved)

ethsBP1-01

ethsBP1-02

3 + 4

100G Card

eth3-01

eth3-02

(eth4-01:0<Y> is reserved)

ethsBP1-03

ethsBP1-04

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the Site. You must use at least two 100G Ports.

Example:

  • The first port on the first card (Slots 1 + 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slots 1 + 2) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slots 3 + 3) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slots 3 + 4) connects to one of the Downlink ports on the second Orchestrator

Note - On this appliance model, hardware acceleration of traffic forwarding is not supported.

Slot Diagram on the Front Panel (from left to right):

1

2

On-board

ports (x8)

This appliance model supports only one card.

Interface Names in Gaia OS:

Slots

Card /

Port Type

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1 + 2

100G Card

eth1-01

eth1-02

(eth2-01:0<Y> are reserved)

ethsBP1-01

ethsBP1-02

On-board

On-board (x8)

eth1

eth2

eth3

eth4

eth5

eth6

eth7

eth8

These ports are not supported

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect the two 100G Ports on a Security Appliance to each Orchestrator on the Site:

  • The first port on the card connects to one of the Downlink ports on the first Orchestrator

  • The second port on the card connects to one of the Downlink ports on the second Orchestrator