40/100 Gb Line Card (QSFP28)

This section uses these abbreviations:

Full Name

Description

Abbreviation

2-Port Single-Width 10/25/40/100G QSFP28 Card

A single-width NIC that takes a single slot in the appliance.

100G Card

10/25/40/100G QSFP28 Port

Port type on the single-width NIC.

100G Port

These appliance models use the 2-Port Single-Width 10/25/40/100G QSFP28 Card:

Appliance Model

Software

Requirements

Hardware

Requirements

29100, 29200

sk180520

For 29100 and 29200 appliances,

see Appendix - NIC Slot Population Guidelines

19100, 19200

sk180520

None

9400, 9700, 9800

sk181698

None

Front Panel

Legend

Item

Component

Description

1

Port activity LED

  • Off - No activity

  • On (Green) - Link exists

  • Blinking (Green) - Activity

2

Link speed LED

  • Off - Lower data rate is selected

  • On (Blue) - 100 Gbit/s data rate is selected

3

Link Speed LED

  • Off - Lower data rate is selected

  • On (Amber) - 10/25/40 Gbit/s data rate is selected

Line Card Slot Population

Follow the instructions in Appendix - NIC Slot Population Guidelines for the preferred placement of this line card inside Quantum 29100 and 29200 appliances.

Installing and Removing Expansion Line Cards

See the relevant Getting Started Guide for your model (sk96246).

  1. Turn off the Appliance.

  2. Remove the power cords from the Power Supply Units.

  3. Loosen the screws on the dummy panel on the front of the Appliance.

  4. Remove the dummy panel.

  5. Insert the Expansion Line Card into the expansion slot.

  6. Push until the card clicks into position.

    Note - Make sure the card is firmly inserted on all sides and that the Expansion Line Card panel is flat against the appliance's front panel.

  7. Tighten the screws on the Expansion Line Card.

  8. Turn on the Appliance.

See the Getting Started Guide for your model (sk96246).

  1. Turn off the Appliance.

  2. Remove the power cords from the Power Supply Units.

  3. Loosen the captive screws on the Expansion Line Card.

  4. Holding the screws, pull the Expansion Line Card out of the expansion slot.

  5. Put the dummy panel on the Expansion Line Card.

  6. Tighten the screws on the dummy panel.

  7. Turn on the Appliance.

Configuring and Monitoring the 100G Ports

See the LightSpeed 10/25/40/100G QSFP28 Ports Administration Guide.

Mapping of 40/100G Ports and Interface Names in Gaia OS

  • In Gaia OS, port names of the installed cards start from the name "eth<X>-01".

    If a card has several ports, then the port names are from eth<X>-01 to ethX-0<Y>, where:

    • <X> is the slot number (see the slot diagram in the corresponding section for your appliance model).

    • <Y> is the port number on the card.

    Examples: eth1-01, eth3-02

  • Non-Maestro configuration refers to the connection of Security Appliances directly to your network and to the Check Point Management Server.

  • Maestro configuration refers to the connection of Security Appliances to a Quantum Maestro Orchestrator that in turn connects to your network and to the Check Point Management Server.

    To connect to Quantum Maestro Orchestrators, you must use only the 100G Ports.

    It is not supported to connect other ports to Orchestrators.

    It is not necessary to remove other cards from the appliance.

    The appliance ignores other cards when it operates as a Maestro Security Group Member.

Important - You must follow the guidelines in sk181465 to insert the line cards in a specific order.

Slot Diagram for Line Cards on the Front Panel (from left to right, from bottom to top):

 

5

6

7

1

2

3

4

Interface Names in Gaia OS:

Note - The table below shows the possible slot population with 100G Cards. For the default configuration, refer to Check Point Product Catalog.

Slot

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1

eth1-01

eth1-02

ethsBP1-01

ethsBP1-02

2

eth2-01

eth2-02

ethsBP2-01

ethsBP2-02

3

eth3-01

eth3-02

ethsBP3-01

ethsBP3-02

4

eth4-01

eth4-02

ethsBP4-01

ethsBP4-02

5

eth5-01

eth5-02

ethsBP5-01

ethsBP5-02

6

eth6-01

eth6-02

ethsBP6-01

ethsBP6-02

7

eth7-01

eth7-02

ethsBP7-01

ethsBP7-02

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

Important - You can connect a maximum of two 100G Cards at the same time to each Orchestrator.

Example for two 100G Cards in Slot 1 and Slot 2:

  • The first port on the first card (Slot 1) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slot 1) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slot 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slot 2) connects to one of the Downlink ports on the second Orchestrator

Important - You must follow the guidelines in sk181465 to insert the line cards in a specific order.

Slot Diagram for Line Cards on the Front Panel (from left to right, from bottom to top):

 

5

6

7

1

2

3

4

Interface Names in Gaia OS:

Note - The table below shows the possible slot population with 100G Cards. For the default configuration, refer to Check Point Product Catalog.

Slot

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1

eth1-01

eth1-02

ethsBP1-01

ethsBP1-02

2

eth2-01

eth2-02

ethsBP2-01

ethsBP2-02

3

eth3-01

eth3-02

ethsBP3-01

ethsBP3-02

4

eth4-01

eth4-02

ethsBP4-01

ethsBP4-02

5

eth5-01

eth5-02

ethsBP5-01

ethsBP5-02

6

eth6-01

eth6-02

ethsBP6-01

ethsBP6-02

7

eth7-01

eth7-02

ethsBP7-01

ethsBP7-02

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

Important - You can connect a maximum of two 100G Cards at the same time to each Orchestrator.

Example for two 100G Cards in Slot 1 and Slot 2:

  • The first port on the first card (Slot 1) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slot 1) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slot 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slot 2) connects to one of the Downlink ports on the second Orchestrator

Slot Diagram for Line Cards on the Front Panel (from left to right):

Not Used

1

2

3

4

Interface Names in Gaia OS:

Note - The table below shows the possible slot population with 100G Cards. For the default configuration, refer to Check Point Product Catalog.

Slot

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1

eth1-01

eth1-02

ethsBP1-01

ethsBP1-02

2

eth2-01

eth2-02

ethsBP2-01

ethsBP2-02

3

eth3-01

eth3-02

ethsBP3-01

ethsBP3-02

4

eth4-01

eth4-02

ethsBP4-01

ethsBP4-02

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

Important - You can connect a maximum of two 100G Cards at the same time to each Orchestrator.

Example for two 100G Cards in Slot 1 and Slot 2:

  • The first port on the first card (Slot 1) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slot 1) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slot 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slot 2) connects to one of the Downlink ports on the second Orchestrator

(*) You can connect all available 100G Ports on a Security Appliance to Quantum Maestro Orchestrators on the Maestro Site.

  • The first 100G Card connects to each Orchestrator on the same Site:

    • The first port on the card connects to one of the Downlink ports on the first Orchestrator

    • The second port on the card connects to one of the Downlink ports on the second Orchestrator

  • The second 100G Card connects to each Orchestrator on the same Site:

    • The first port on the card connects to another Downlink port on the first Orchestrator

    • The second port on the card connects to another Downlink port on the second Orchestrator

Slot Diagram for Line Cards on the Front Panel (from left to right):

Not Used

1

2

3

4

Interface Names in Gaia OS:

Note - The table below shows the possible slot population with 100G Cards. For the default configuration, refer to Check Point Product Catalog.

Slot

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1

eth1-01

eth1-02

ethsBP1-01

ethsBP1-02

2

eth2-01

eth2-02

ethsBP2-01

ethsBP2-02

3

eth3-01

eth3-02

ethsBP3-01

ethsBP3-02

4

eth4-01

eth4-02

ethsBP4-01

ethsBP4-02

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

Important - You can connect a maximum of two 100G Cards at the same time to each Orchestrator.

Example for two 100G Cards in Slot 1 and Slot 2:

  • The first port on the first card (Slot 1) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slot 1) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slot 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slot 2) connects to one of the Downlink ports on the second Orchestrator

Slot Diagram for the Front Panel (from left to right):

1

2

On-board

ports (x4)

On-board

ports (x4)

Interface Names in Gaia OS:

Slot

Card /

Port Type

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1

100G Card

eth1-01

eth1-02

ethsBP1-01

ethsBP1-02

2

100G Card

eth2-01

eth2-02

ethsBP2-01

ethsBP2-02

On-board

On-board (x4)

eth1

eth2

eth3

eth4

These ports are not supported

On-board

On-board (x4)

eth5

eth6

eth7

eth8

These ports are not supported

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

Important - You can connect a maximum of two 100G Cards at the same time to each Orchestrator.

Example for two 100G Cards in Slot 1 and Slot 2:

  • The first port on the first card (Slot 1) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slot 1) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slot 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slot 2) connects to one of the Downlink ports on the second Orchestrator

Slot Diagram for the Front Panel (from left to right):

1

2

On-board

ports (x4)

On-board

ports (x4)

Interface Names in Gaia OS:

Slot

Card /

Port Type

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1

100G Card

eth1-01

eth1-02

ethsBP1-01

ethsBP1-02

2

100G Card

eth2-01

eth2-02

ethsBP2-01

ethsBP2-02

On-board

On-board (x4)

eth1

eth2

eth3

eth4

These ports are not supported

On-board

On-board (x4)

eth5

eth6

eth7

eth8

These ports are not supported

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site.

Important - You can connect a maximum of two 100G Cards at the same time to each Orchestrator.

Example for two 100G Cards in Slot 1 and Slot 2:

  • The first port on the first card (Slot 1) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the first card (Slot 1) connects to one of the Downlink ports on the second Orchestrator

  • The first port on the second card (Slot 2) connects to one of the Downlink ports on the first Orchestrator

  • The second port on the second card (Slot 2) connects to one of the Downlink ports on the second Orchestrator

Slot Diagram for the Front Panel (from left to right):

1

On-board

ports (x4)

On-board

ports (x8)

Interface Names in Gaia OS:

Slot

Card /

Port Type

Names of Ports in Gaia OS -

Non-Maestro configuration

Names of Ports in Gaia OS -

Maestro configuration (*)

1

100G Card

eth1-01

eth1-02

ethsBP1-01

ethsBP1-02

On-board

On-board (x4)

eth1

eth2

eth3

eth4

These ports are not supported

On-board

On-board (x8)

eth5

eth6

eth7

eth8

eth9

eth10

eth11

eth12

These ports are not supported

(*) If there are two Quantum Maestro Orchestrators on a Maestro Site, then you must connect each 100G Card on a Security Appliance to each Orchestrator on the same Site:

  • The first port on the card connects to one of the Downlink ports on the first Orchestrator

  • The second port on the card connects to one of the Downlink ports on the second Orchestrator