Loopback Interfaces

You can define a virtual loopback interface by assigning an IPv4 or IPv6 address to the lo (local) interface.

This can be useful for testing purposes or as a proxy interface for an unnumbered interface.

This section shows you how to configure a loopback interface in the Gaia PortalClosed Web interface for the Check Point Gaia operating system. and Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

Configuring Loopback Interfaces in Gaia Portal

Note - You must connect to the GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Portal of the applicable Security GroupClosed A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected..

Step

Instructions

1

In the navigation tree, click Interface Management > Network Interfaces.

2

Click Add > Loopback.

3

In the Add loopback window:

  1. The Enable option is selected by default to set the loopback interface status to UP.

  2. In the Comment field, enter the applicable comment text (up to 100 characters).

  3. On the IPv4 tab, enter the IPv4 address and subnet mask.

    These IPv4 addresses are not allowed:

    • 0.x.x.x

    • 127.x.x.x

    • 224.x.x.x - 239.x.x.x (Class D)

    • 240.x.x.x - 255.x.x.x (Class E)

    • 255.255.255.255

  4. Optional: On the IPv6 tab, enter the IPv6 address and mask length.

    Important:

    • First, you must enable the IPv6 Support and reboot (see System Configuration).

    • R80.20SP does not support the option Obtain IPv6 address automatically (Known Limitation MBS-3246).

4

Click OK.

Note - When you add a new loopback interface, Gaia automatically assigns a name in the format "loop<XX>", where XX is a sequence number that starts from 00. The name of the first loopback interface is loop00. The name of the second loopback interface is loop01. And so on.

Step

Instructions

1

In the navigation tree, click Interface Management > Network Interfaces.

2

Select a loopback interface and click Edit.

3

In the Edit loop<NN> window:

  1. If required, change the IPv4 address and subnet mask.

  2. If required, change the IPv6 address and mask length.

4

Click OK.

Step

Instructions

1

In the navigation tree, click Network Management > Network Interfaces.

2

Select a loopback interface and click Delete.

3

Click OK, when the confirmation message shows.

Configuring Loopback Interfaces in Gaia Clish

Note - You must run these commands in Gaia gClishClosed The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group. of the applicable Security Group.

Syntax

add interface lo loopback <IPv4 Address>/<Mask Length>

Note - When you add a new loopback interface, Gaia automatically assigns a name in the format "loop<XX>", where XX is a sequence number that starts from 00. The name of the first loopback interface is loop00. The name of the second loopback interface is loop01. And so on.

set interface <Name of Loopback Interface> {ipv4-address <options> | ipv6-address <options>}

Note - You can only change IPv4 or IPv6 address on a loopback interface.

show interface<SPACE><TAB>

show interface <Name of Loopback Interface>

delete interface lo loopback <Name of Loopback Interface>

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Parameters

Parameter

Description

lo

You must use the lo (local interface) keyword to define a loopback interface

<IPv4 Address>

Specifies the IPv4 address

These IPv4 addresses are not allowed:

  • 0.x.x.x

  • 127.x.x.x

  • 224.x.x.x - 239.x.x.x (Class D)

  • 240.x.x.x - 255.x.x.x (Class E)

  • 255.255.255.255

<Mask Length>

Configures the IPv4 subnet mask length using the CIDR notation (integer between 2 and 32)

<Name of Loopback Interface>

Specifies a loopback interface name

Example

[Global] MyChassis-ch01-01 > add interface lo loopback 10.10.99.1/24

[Global] MyChassis-ch01-01 > delete interface lo loopback loop01