Configuring Bond Interfaces in Gaia Portal

Important:

On Scalable Platforms (Maestro and Chassis), you must connect to the Gaia Portal Web interface for the Check Point Gaia operating system. of the applicable Security Group.
Before you begin, make sure that the subordinate interfaces do not have any IP addresses or aliases configured.

Step

Instructions

In the navigation tree, click Network Management > Network Interfaces.

Make sure that the subordinate interfaces, which you wish to add to the Bond interface, do not have IP addresses.

For a new bond interface, select Add > Bond.

To edit an existing Bond interface, select the Bond interface and click Edit.

On the IPv4 tab, enter the IPv4 address and subnet mask.

You can optionally select the Obtain IPv4 Address automatically option.

Important - Scalable Platforms (Maestro and Chassis) do not support this feature (Known Limitation MBS-3246).

On the IPv6 tab (optional), enter the IPv6 address and mask length.

You can optionally select the Obtain IPv6 Address automatically option.

Important:

First, you must enable the IPv6 Support and reboot (see System Configuration).
Scalable Platforms (Maestro and Chassis) do not support this feature (Known Limitation MBS-3246 and PMTR-47313).
R81.10 does not support IPv6 Address on the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Management Interface (1) Interface on a Gaia Security Gateway or Cluster member, through which Management Server connects to the Security Gateway or Cluster member. (2) Interface on Gaia computer, through which users connect to Gaia Portal or CLI. (Known Limitation PMTR-47313).

Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. does not support IPv6 at all (Known Limitation PMTR-14989).

On the Bond tab:

Select or enter a Bond Group ID. This parameter is an integer between 0 and 1024.

Select the subordinate interfaces from the Available Interfaces list and then click Add.

Important - The Bond interface gets its MAC Address from the first subordinate interface you add to the bonding group (the interface that appears at the top of the Chosen Interfaces list).

Select an Operation Mode:

Round Robin (default)

Bond uses all subordinate interfaces sequentially (High Availability + Load Sharing).

Note - Scalable Platforms (Maestro and Chassis) do not support this feature (Known Limitation MBS-4080).

Active-Backup

Bond uses one subordinate interface at a time (High Availability).
XOR

Bond uses subordinate interfaces based on a hash function (High Availability + Load Sharing).
802.3ad

Dynamic bonding according to IEEE 802.3ad (Load Sharing).

On the Advanced tab:

Configure the required MTU for your network (if not sure, leave the default value).
Configure the Monitor Interval - How much time to wait between checking each subordinate interface for link-failure. The valid range is 1-5000 ms. The default is 100 ms.
Configure the Down Delay - How much time to wait, after sending a monitor request to a subordinate interface, before bringing down the subordinate interface. The valid range is 1-5000 ms. The default is 200 ms.
Configure the Up Delay - How much time to wait, after sending a monitor request to a subordinate interface, before bringing up the subordinate interface. The valid range is 1-5000 ms. The default is 200 ms.

Additional configuration settings are available depending on the selected Bond Operation Mode:

If you selected the Round Robin bond operation mode, then there are no additional configuration settings.

If you selected the Active-Backup bond operation mode, then select the Primary Interface.

By default, the first subordinate interface added to the bond group, becomes the primary.

Important - You must not configure the primary subordinate interface explicitly in ClusterXL when you configure the Sync interface on a bonding group for redundancy. For more information, see the R81.10 ClusterXL Administration Guide > Chapter ClusterXL Requirements and Compatibility > Section Supported Topologies for Synchronization Network.

If you selected the XOR bond operation mode, then select the Transmit Hash Policy - the algorithm for subordinate interface selection according to the specified TCP/IP Layer.

Select either Layer 2 (uses XOR of the physical interface MAC address), or Layer 3+4 (uses Layer 3 and Layer 4 protocol data).
If you selected the 802.3ad bond operation mode, then perform these two steps:
1. Select the Transmit Hash Policy - the algorithm for subordinate interface selection according to the specified TCP/IP Layer.
  
  Select either Layer 2 (uses XOR of the physical interface MAC address), or Layer 3+4 (uses IP addresses and Ports).
2. Select the LACP Rate - how frequently the LACP partner should transmit LACPDUs.
  
  Select either Slow (every thirty seconds), or Fast (every one second).

Click OK.

Notes:

The name of a Bond interface in Gaia is "bond<Bond Group ID>".

For example, the name of a bond interface with a Bond Group ID of 5 is "bond5".
To configure MTU on a Bond subordinate interface, you must configure MTU on the Bond interface.

This MTU applies to all subordinate interfaces assigned to this Bond interface.