Physical Interfaces

Adding or removing an interface card

Step	Instructions
1	Turn off the Gaia computer: In Gaia Portal: Click Maintenance > Shut Down, and click Halt In Gaia Clish: Run: `halt`
2	Add, remove, or replace the interface cards.
3	Turn on the Gaia computer.

Step

Instructions

1

Turn off the Gaia computer:

In Gaia Portal:

Click Maintenance > Shut Down, and click Halt
In Gaia Clish:

Run: halt

2

Add, remove, or replace the interface cards.

3

Turn on the Gaia computer.

Gaia automatically identifies the new or changed physical interfaces and assigns an interface name. The physical interfaces show in the list in the Gaia Portal.

Configuring a physical interface

Step

Instructions

1

In the navigation tree, click Network Management > Network Interfaces.

2

Select an interface from the list and click Edit.

3

Select the Enable option to set the interface status to UP.

4

In the Comment field, enter the applicable comment text (up to 100 characters).

5

On the IPv4 tab, do one of these:

Select Obtain IPv4 address automatically to get the IPv4 address from the DHCPv4 server.

Important - Scalable Platforms (Maestro and Chassis) do not support this feature (Known Limitation MBS-3246).

Enter the IPv4 address and subnet mask in the applicable fields.

6

Optional: On the IPv6 tab, do one of these:

Select Obtain IPv6 address automatically to get the IPv6 address from the DHCPv6 server.

Important - Scalable Platforms (Maestro and Chassis) do not support this feature (Known Limitation MBS-3246).

Enter the IPv6 address and mask length in the applicable fields.

Important:

First, you must enable the IPv6 Support and reboot (see System Configuration).
R81.20 does not support IPv6 Address on the Gaia Management Interface (1) Interface on a Gaia Security Gateway or Cluster member, through which Management Server connects to the Security Gateway or Cluster member. (2) Interface on Gaia computer, through which users connect to Gaia Portal or CLI. (Known Limitation PMTR-47313).
Multi-Domain Server Dedicated Check Point server that runs Check Point software to host virtual Security Management Servers called Domain Management Servers. Synonym: Multi-Domain Security Management Server. Acronym: MDS. does not support IPv6 at all (Known Limitation PMTR-14989).

7

On the Ethernet tab:

Select Auto Negotiation, or select a link speed and duplex setting from the list.
In the Hardware Address field, enter the Hardware MAC address (if not automatically received from the NIC).

Caution - Do not manually change the MAC address unless you are sure that it is incorrect or has changed. An incorrect MAC address can lead to a communication failure.
In the MTU field, enter the applicable Maximum Transmission Unit (MTU) value (minimal value is 68, maximal value is 16000, and default value is 1500).
Select Monitor Mode, if needed.

For the configuration procedure:
- On a Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. and ClusterXL, see the R81.20 Installation and Upgrade Guide > Chapter Special Scenarios for Security Gateways > Section Deploying a Security Gateway in Monitor Mode.
- On Maestro, see the R81.20 Quantum Maestro Administration Guide > Chapter Deploying a Security Group in Monitor Mode.
- On Scalable Chassis, see the R81.20 Quantum Scalable Chassis Administration Guide > Chapter Deploying a Security Group in Monitor Mode.

8

Click OK.

Configuring an interface

set interface <Name of Physical Interface>

      auto-negotiation {on | off}

      comments "Text"

      ipv4-address <IPv4 Address> {subnet-mask <Mask> | mask-length <Mask Length>}

      ipv6-address <IPv6 Address> mask-length <Mask Length>

      ipv6-autoconfig {on | off}

      link-speed {10M/half | 10M/full | 100M/half | 100M/full | 1000M/full | 10000M/full}

      mac-addr <MAC Address>

      monitor-mode {on | off}

      mtu <68-16000 | 1280-16000>

      rx-ringsize <0-4096>

      state {on | off}

      tx-ringsize <0-4096>

Viewing all configured settings of all interfaces

show interfaces all

Viewing all configured settings of a specific interface

show interface <Name of Physical Interface>

Viewing the specific configured setting of a specific interface

show interface <Name of Physical Interface><SPACE><TAB>

CLI Parameters

Parameter

Description

interface <Name of Physical Interface>

Specifies a physical interface.

auto-negotiation {on | off}

Configures automatic negotiation of interface link speed and duplex settings:

on - Enabled
off - Disabled

comments "Text"

Configures an optional free text comment.

Write the text in double quotes.
Text must be up to 100 characters.
This comment appears in the Gaia Portal and in the output of the "show configuration" command.

ipv4-address <IPv4 Address>

Configures the IPv4 address.

ipv6-address <IPv6 Address>

Configures the IPv6 address.

Important:

First, you must enable the IPv6 Support and reboot (see System Configuration).
R81.20 does not support IPv6 Address on the Gaia Management Interface (Known Limitation PMTR-47313).

links <Number>

Configures the minimal number of required link interfaces for a ClusterXL Bond Load Sharing.

subnet-mask <Mask>

Configures the IPv4 subnet mask using dotted decimal notation (X.X.X.X).

mask-length <Mask Length>

Configures the IPv4 or IPv6 subnet mask length using the CIDR notation (integer between 2 and 32).

ipv6-autoconfig {on | off}

Configures if this interface gets an IPv6 address from a DHCPv6 Server:

on - Gets an IPv6 address from a DHCPv6 Server
off - Does not get an IPv6 address from a DHCPv6 Server (you must assign it manually)

Important:

First, you must enable the IPv6 Support and reboot (see System Configuration).
Scalable Platforms (Maestro and Chassis) do not support this feature

link-speed {10M/half | 10M/full | 100M/half | 100M/full | 1000M/full | 1000M/full}

Configures the interface link speed and duplex status.

Available speed and duplex combinations are:

10M/half
10M/full
100M/half
100M/full
1000M/full
10000M/full

mac-addr <MAC Address>

Configures the hardware MAC address.

monitor-mode {on | off}

Configures Monitor Mode on this interface:

on - Enabled
off - Disabled

Default: off

For the configuration procedure:

On a Security Gateway and ClusterXL, see the R81.20 Installation and Upgrade Guide > Chapter Special Scenarios for Security Gateways > Section Deploying a Security Gateway in Monitor Mode.
On Maestro, see the R81.20 Quantum Maestro Administration Guide > Chapter Deploying a Security Group in Monitor Mode.
On Scalable Chassis, see the R81.20 Quantum Scalable Chassis Administration Guide > Chapter Deploying a Security Group in Monitor Mode.

mtu <68-16000 | 1280-16000>

Configures the Maximum Transmission Unit size for an interface.

For IPv4:

Range: 68 - 16000 bytes
Default: 1500 bytes

For IPv6:

Range: 1280 - 16000 bytes
Default: 1500 bytes

rx-ringsize <0-4096>

Configures the receive buffer size.

Range: 0 - 4096 bytes
Default: Depends on the interface driver

state {on | off}

Configures the interface state:

on - Enabled
off - Disabled

tx-ringsize <0-4096>

Configures the transmit buffer size.

Range: 0 - 4096 bytes
Default: Depends on the interface driver

Example

gaia> set interface eth2 ipv4-address 40.40.40.1 subnet-mask 255.255.255.0
gaia> set interface eth2 mtu 1400
gaia> set interface eth2 state on
gaia> set interface eth2 link-speed 100M/full

Physical Interfaces

Configuring Physical Interfaces in Gaia Portal

Configuring Physical Interfaces in Gaia Clish