vsx_util change_interfaces

Description

Automatically replaces designated existing interfaces with new interfaces on all Virtual Devices, to which the existing interfaces connect.

This command is useful when converting a deployment to use Link Aggregation, especially where VLANs connect to many Virtual Devices.

Syntax

vsx_util change_interfaces

Required Input

• The applicable VSX Gateway or VSX Cluster object
• Where to apply the change (Management Server only, or Management Server and VSX Gateway / VSX Cluster Members)
• Name of the interface to be replaced
• Name of the new (replacement) interface

Comments

• Execute the command and follow the instructions on the screen
• This command supports the resume feature
• You can use this command to migrate a VSX deployment from an Open Server to a Check Point appliance by using the Management Only mode
• Refer to the Notes section for additional information

Procedure

To change interfaces:

1. Close SmartConsole clients for the Security Management Server or Domain Management Servers.
2. Connect to the command line on the Management Server.
3. Log in to the Expert Mode.
4. On Multi-Domain Server, go to the context of the Main Domain Management Server:

   mdsenv <IP address or Name of Domain Management Server>

5. Run:

   vsx_util change_interfaces

6. Enter the IP address for the Security Management Server or Main Domain Management Server.
7. Enter the administrator username and password.
8. Enter or select the VSX Cluster or VSX Gateway object.
9. When prompted, select one of the following options:
   • Apply changes to management and Security Gateway/cluster members

     Changes the interface on the Management Server, the VSX Gateway or VSX Cluster Members.

   • Apply changes to management Only

     Changes interface on the Management Server only. You must use the vsx_util reconfigure command to push the updated VSX configuration to VSX Gateways or VSX Cluster Members.

10. Select the interface to be replaced.
11. Select the replacement interface.
    1. You can optionally add a new interface if you select Enter new interface name. This interface must physically exist on the VSX Gateway or VSX Cluster Members. Otherwise, the operation fails.
    2. At the prompt, enter the new interface name. If the new interface is a Bond interface, the interface name must match the name of the Bond interface exactly.
12. To replace additional interfaces, enter y when prompted and repeat Steps 6 through 8.
13. To complete the process, enter n.
14. If you selected the Apply changes to management only option, you can remove the replaced interfaces from the database.

    Enter y for this option:

    Would you like to remove the old interfaces from the database? (y|n) [n]:

15. Reboot the VSX Gateway or VSX Cluster Members.

Notes

• The option Apply changes to the management database and to the VSX Gateway/Cluster members immediately verifies connectivity between the Management Server and the VSX Gateway or VSX Cluster Members. In the event of a connectivity failure one of the following actions occur:
  1. If all of the newly changed interfaces fail to establish connectivity, the process terminates unsuccessfully.
  2. If one or more interfaces successfully establish connectivity, while one or more other interfaces fail, you may optionally continue the process.

     In this case, those interfaces for which connectivity was established successfully will be changed. For those interfaces that failed, you must then resolve the issue and then run the vsx_util reconfigure command to complete the process.

• If you select the option Apply changes to the management database only, you can select one of these:
  • Another interface from list (if any are available).
  • Option to add a new interface.