Physical Interfaces

This section has configuration procedures and examples for defining different types of interfaces on a GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. platform.

Gaia automatically identifies physical interfaces (NICs) installed on the computer.

You cannot add or delete a physical interface in the Gaia PortalClosed Web interface for the Check Point Gaia operating system. or Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

You cannot add, change or remove physical interface cards while the Gaia computer is running.

Step

Instructions

1

Turn off the Gaia computer:

  • In Gaia Portal:

    Click Maintenance > Shut Down, and click Halt

  • In Gaia Clish:

    Run: halt

2

Add, remove, or replace the interface cards.

3

Turn on the Gaia computer.

Gaia automatically identifies the new or changed physical interfaces and assigns an interface name. The physical interfaces show in the list in the Gaia Portal.

Configuring Physical Interfaces in Gaia Portal

This section includes procedures for changing physical interface parameters in the Gaia Portal.

Notes:

To configure a physical interface:

Step

Instructions

1

In the navigation tree, click Network Management > Network Interfaces.

2

Select an interface from the list and click Edit.

3

Select the Enable option to set the interface status to UP.

4

In the Comment field, enter the applicable comment text (up to 100 characters).

5

On the IPv4 tab, enter the static IPv4 address and subnet mask in the applicable fields.

Important - R80.20SP does not support the option Obtain IPv4 address automatically (Known Limitation MBS-3246).

6

Optional: On the IPv6 tab, enter the IPv6 address and mask length in the applicable fields.

Important:

7

On the Ethernet tab:

  • Select Auto Negotiation, or select a link speed and duplex setting from the list.

  • In the Hardware Address field, enter the Hardware MAC address (if not automatically received from the NIC).

    Caution - Do not manually change the MAC address unless you are sure that it is incorrect or has changed. An incorrect MAC address can lead to a communication failure.

  • In the MTU field, enter the applicable Maximum Transmission Unit (MTU) value (minimal value is 68, maximal value is 16000, and default value is 1500).

  • Select Monitor Mode, if needed.

    For configuration procedure, see the R80.20SP Quantum Maestro Administration Guide > Chapter Deploying a Security Group in Monitor Mode.

8

Click OK.

Configuring Physical Interfaces in Gaia Clish

Note - You must run these commands in Gaia gClishClosed The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group. of the applicable Security Group.

Syntax

set interface <Name of Physical Interface>
      auto-negotiation {on | off}
      comments "Text"
      ipv4-address <IPv4 Address> {subnet-mask <Mask> | mask-length <Mask Length>}
      ipv6-address <IPv6 Address> mask-length <Mask Length>
      ipv6-autoconfig {on | off}
      link-speed {10M/half | 10M/full | 100M/half | 100M/full | 1000M/full | 10000M/full}
      mac-addr <MAC Address>
      monitor-mode {on | off}
      mtu <68-16000 | 1280-16000>
      rx-ringsize <0-4096>
      state {on | off}
      tx-ringsize <0-4096>

show interfaces all

show interface <Name of Physical Interface>

show interface <Name of Physical Interface><SPACE><TAB>

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Parameters

Parameter

Description

interface <Name of Physical Interface>

Specifies a physical interface.

auto-negotiation {on | off}

Configures automatic negotiation of interface link speed and duplex settings:

  • on - Enabled

  • off - Disabled

comments "Text"

Configures an optional free text comment.

  • Write the text in double quotes.

  • Text must be up to 100 characters.

  • This comment appears in the Gaia Portal and in the output of the "show configuration" command.

ipv4-address <IPv4 Address>

Configures the IPv4 address.

ipv6-address <IPv6 Address>

Optional: Configures the IPv6 address.

Important:

  • First, you must enable the IPv6 Support and reboot (see System Configuration).

  • R80.20SP does not support IPv6 Address on Gaia Management Interface (Known Limitation 01622840).

subnet-mask <Mask>

Configures the IPv4 subnet mask using dotted decimal notation (X.X.X.X).

mask-length <Mask Length>

Configures the IPv4 or IPv6 subnet mask length using the CIDR notation (integer between 2 and 32).

ipv6-autoconfig {on | off}

R80.20SP does not support the option Obtain IPv6 address automatically (Known Limitation MBS-3246).

link-speed {10M/half | 10M/full | 100M/half | 100M/full | 1000M/full | 1000M/full}

Configures the interface link speed and duplex status.

Available speed and duplex combinations are:

  • 10M/half

  • 10M/full

  • 100M/half

  • 100M/full

  • 1000M/full

  • 10000M/full

mac-addr <MAC Address>

Configures the hardware MAC address.

monitor-mode {on | off}

Configures Monitor Mode on this interface:

  • on - Enabled

  • off - Disabled

Default: off

For configuration procedure, see the R80.20 Installation and Upgrade Guide > Chapter Special Scenarios for Security Gateways > Section Deploying a Security Gateway in Monitor Mode.

mtu <68-16000 | 1280-16000>

Configures the Maximum Transmission Unit size for an interface.

For IPv4:

  • Range: 68 - 16000 bytes

  • Default: 1500 bytes

For IPv6:

  • Range: 1280 - 16000 bytes

  • Default: 1500 bytes

rx-ringsize <0-4096>

Configures the receive buffer size.

  • Range: 0 - 4096 bytes

  • Default: Depends on the interface driver

state {on | off}

Configures the interface state:

  • on - Enabled

  • off - Disabled

tx-ringsize <0-4096>

Configures the transmit buffer size.

  • Range: 0 - 4096 bytes

  • Default: Depends on the interface driver

 
[Global] MyChassis-ch01-01 > set interface eth2 ipv4-address 40.40.40.1 subnet-mask 255.255.255.0
[Global] MyChassis-ch01-01 > set interface eth2 mtu 1400
[Global] MyChassis-ch01-01 > set interface eth2 state on
[Global] MyChassis-ch01-01 > set interface eth2 link-speed 100M/full
[Global] MyChassis-ch01-01 > save config