Aliases

This section shows you how to configure an alias in the Gaia Portal Web interface for the Check Point Gaia operating system. and Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

Interface aliases let you assign more than one IPv4 address to physical or virtual interfaces (Bonds, Bridges, VLANs, and Loopbacks).

Notes:

ClusterXL does not support aliases.
You cannot change settings of an existing interface alias.

Configuring Aliases in Gaia Portal

Note - This section does not apply to Scalable Platforms (Maestro and Chassis).

Adding an interface alias

Step	Instructions
1	In the navigation tree, click Network Management > Network Interfaces.
2	Click Add > Alias.
3	On the IPv4 tab, enter the IPv4 address and subnet mask.
4	On the Alias tab, select the applicable interface, to which this alias is assigned.
5	Click OK.

Note - The new alias interface name is automatically created by adding a sequence number to the interface name. For example, the name of first alias added to eth1 is eth1:1. The second alias added is eth1:2, and so on.

Deleting an interface alias

Step	Instructions
1	In the navigation tree, click Network Management > Network Interfaces.
2	Select an interface alias and click Delete.
3	Click OK, when the confirmation message shows.

Configuring Aliases in Gaia Clish

Note - This section does not apply to Scalable Platforms (Maestro and Chassis).

Syntax

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Parameters

CLI Parameters

Parameter	Description
`<Name of Interface>`	Specifies the name of the interface, on which to create an alias IPv4 address
`<IPv4 Address>`	Assigns the alias IPv4 address
`<Mask Length>`	Configures alias IPv4 subnet mask length using the CIDR notation (integer between 2 and 32)
`<Name of Alias Interface>`	Specifies the name of the alias interface in the format `<IF>:XX`, where `XX` is the automatically assigned sequence number

Configuring Aliases on Scalable Platforms

Notes:

This section applies only to Scalable Platforms (Maestro and Chassis).
The feature is not supported in VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. mode.

Important:

To control the support of aliases, you use the kernel parameter fwha_arp_support_aliases:

Value of the Kernel Parameter

Gaia Behavior on Scalable Platforms

fwha_arp_support_aliases=0

This is the default.

Support of aliases is disabled.

fwha_arp_support_aliases=1

Support of aliases is enabled.

Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. OS sends GARP packets from alias interfaces as well.

You can configure aliases only in Gaia gClish of the applicable Security Group.
You cannot change settings of an existing interface alias. You must delete it and add a new alias.

For additional information, see sk167073.

Adding an alias

Step

Instructions

Set the value of the kernel parameter fwha_arp_support_aliases to 1:

Connect to the command line on the Security Group.
Log in to the Expert mode.

Configure the value temporarily (does not survive reboot):

g_fw ctl set int fwha_arp_support_aliases 1

Make sure the new value is set:

g_fw ctl get int fwha_arp_support_aliases

Configure the value permanently (requires reboot - you can reboot later at any time):

g_update_conf_file $FWDIR/boot/modules/fwkern.conf fwha_arp_support_aliases=1

In Gaia gClish of the applicable Security Group, add the applicable interface alias:

Connect to the command line on the Security Group.
Log in to Gaia Clish.
On Scalable Platforms, go to Gaia gClish:Type gclish and press Enter.

Add the applicable interface alias:

add interface <Name of Interface> alias <IPv4 Address>/<Mask Length>

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Note - A new alias interface name is automatically created by adding a sequence number to the original interface name. For example, the name of first alias added to eth1 is eth1:1. The second alias added is eth1:2, and so on.

Update the topology of the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. object in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.:

Connect with SmartConsole to the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. that manages this Security Group.
Open the applicable Security Gateway object.
From the left tree, click Network Management.

Click Get Interfaces > Get Interfaces with Topology.

Best Practice - In the Topology > Leads To section, use the default topology settings in the interface, on which you add an interface alias (and not the Override option). Otherwise, it is not possible to link alias networks to the applicable interface.

Make sure the information is correct and click Accept.
Click OK.

Install the Access Control Policy on this Security Gateway object.

Make sure the configuration is consistent on all Security Group Members:

Connect to the command line on the Security Group.
Log in to the Expert mode.

Run:

config_verify -v

Deleting an alias

Step

Instructions

In Gaia gClish of the applicable Security Group, delete the applicable interface alias:

Connect to the command line on the Security Group.
Log in to Gaia Clish.
On Scalable Platforms, go to Gaia gClish:Type gclish and press Enter.

Add the applicable interface alias:

delete interface <Name of Interface> alias <Name of Alias Interface>

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Update the topology of the Security Gateway object in SmartConsole:

Connect with SmartConsole to the Management Server that manages this Security Group.
Open the applicable Security Gateway object.
From the left tree, click Network Management.

Click Get Interfaces > Get Interfaces with Topology.

Best Practice - In the Topology > Leads To section, use the default topology settings in the interface, on which you delete an interface alias (and not the Override option).

Make sure the information is correct and click Accept.
Click OK.

Install the Access Control Policy on this Security Gateway object.

Make sure the configuration is consistent on all Security Group Members:

Connect to the command line on the Security Group.
Log in to the Expert mode.

Run:

config_verify -v

Viewing the configured aliases

Step

Instructions

Connect to the command line on the applicable Security Group.

On Scalable Platforms, go to Gaia gClish:Type gclish and press Enter.

View the interface aliases:

show interface <Name of Interface> aliases

CLI Parameters

Parameter	Description
`<Name of Interface>`	Specifies the name of the interface, on which to create an alias IPv4 address
`<IPv4 Address>`	Assigns the alias IPv4 address
`<Mask Length>`	Configures alias IPv4 subnet mask length using the CIDR notation (integer between 2 and 32)
`<Name of Alias Interface>`	Specifies the name of the alias interface in the format `<IF>:XX`, where `XX` is the automatically assigned sequence number