R81.10 VSX Administration Guide

vsx_util change_private_net

Description

Changes the IP address of the Internal Communication Network in a VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. (cluster private network).

Important - Before you run the vsx_util commands:

Back up the VSX environment. See sk100395: How to backup and restore VSX gateway.
You must close all SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. clients. Failure to do so may result in a database lock error.
On a Multi-Domain Security Management Server Dedicated Check Point server that runs Check Point software to manage the objects and policies in a Check Point environment within a single management Domain. Synonym: Single-Domain Security Management Server., you must switch to the context of the Main Domain Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. that manages the VSX Gateway Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0. / VSX Cluster object.

Use the command "mdsenv <IP Address or Name of Domain Management Server>".

Syntax

vsx_util change_private_net

Required Input

The applicable VSX Cluster object.
New IPv4 address for the cluster private network.
New IPv4 netmask for the cluster private network.
New IPv6 address and prefix for the cluster private network.

Comments

Run the command and follow the instructions on the screen.
The IP address of the Internal Communication Network must be unique.

This IP address must not be used anywhere in your environment, including the Virtual Devices on this VSX Cluster.
The illegal IPv4 addresses are: 0.0.0.0, 127.0.0.0, and 255.255.255.255
For IPv4 address, the network mask must be one of these:
- 255.255.0.0, or /16
- 255.255.128.0, or /17
- 255.255.192.0, or /18
- 255.255.224.0, or /19
- 255.255.240.0, or /20
- 255.255.248.0, or /21
- 255.255.252.0, or /22 (this is the default)
For IPv6 address, the new prefix must be /80.

03 December 2024

© 2021 - 2024 Check Point Software Technologies Ltd.