Configuring Bond Interface on Uplink Ports

1. Assign the applicable Uplink ports to the applicable Security Group

   You perform this step on one of the Quantum Maestro Orchestrators.

   You can perform this step in either Gaia Portal, or Gaia Clish of the Quantum Maestro Orchestrator A scalable Network Security System that connects multiple Check Point Security Appliances into a unified system. Synonyms: Orchestrator, Quantum Maestro Orchestrator, Maestro Hyperscale Orchestrator. Acronym: MHO..

   In Gaia Portal

   Step	Instructions
   1	Connect with a web browser to the Gaia Portal on one of the Quantum Maestro Orchestrators.
   2	Assign the applicable Uplink ports Interfaces on the Quantum Maestro Orchestrator used to connect to external and internal networks. Gaia operating system shows these interfaces in Gaia Portal and in Gaia Clish. SmartConsole shows these interfaces in the corresponding SMO Security Gateway object. to the applicable Security Group A logical group of Security Appliances that provides Active/Active cluster functionality. A Security Group can contain one or more Security Appliances. Security Groups work separately and independently from each other. To the production networks, a Security Group appears a single Security Gateway. Every Security Group contains: (A) Applicable Uplink ports, to which your production networks are connected; (B) Security Appliances (the Quantum Maestro Orchestrator determines the applicable Downlink ports automatically); (C) Applicable management port, to which the Check Point Management Server is connected.. See Assigning Interfaces to a Security Group.
   3	In the bottom left corner, click Apply.

   In Gaia Clish

   Step	Instructions
   1	Connect to the command line on one of the Quantum Maestro Orchestrators.
   2	Log in to the Gaia Clish.
   3	Assign the applicable Uplink ports to the applicable Security Group. See Assigning One Interface to a Security Group.
   4	Verify the new configuration. See Verifying the Configuration Changes.
   5	Apply the new configuration. See Applying the Configuration Changes.

2. Configure the Bond interface on top of the Uplink ports

   You can perform this step in either Gaia Portal, or Gaia gClish The name of the global command line shell in Check Point Gaia operating system for Security Appliances connected to Check Point Quantum Maestro Orchestrators. Commands you run in this shell apply to all Security Appliances in the Security Group. of the Security Group.

   In Gaia Portal

   Step	Instructions
   1	Connect with a web browser to the Gaia Portal of the Security Group.
   2	Configure the Bond interface on top of the Uplink ports.
   3	In Gateway mode only: Assign the IP address to this Bond interface. Important - In VSX mode, you must assign the IP address in SmartConsole in the VSX Gateway object, or applicable Virtual System object.

   In Gaia gClish

   Step	Instructions
   1	Connect to the command line of the Security Group.
   2	Log in to the Expert mode.
   3	Go to the Gaia gClish: gclish
   4	Configure the Bond interface on top of the Uplink ports.
   5	In Gateway mode only: Assign the IP address to this Bond interface. Important - In VSX mode, you must assign the IP address in SmartConsole in the VSX Gateway object, or applicable Virtual System object.

   For more information, see the R81.20 Gaia Administration Guide.

3. Configure the Security Gateway or VSX Gateway object in SmartConsole

   • If you already created a Security Gateway object for this Security Group:

     Step	Instructions
     1	Connect with SmartConsole to the Management Server.
     2	From the left navigation panel, click Gateways & Servers.
     3	Open the applicable Security Gateway object.
     4	From the left tree, click Network Management.
     5	Click Get Interfaces > Get Interfaces Without Topology.
     6	Click OK.
     7	Install the Access Control Policy on this Security Gateway object.

   • If you already created a VSX Gateway object for this Security Group:

     Step	Instructions
     1	Connect with SmartConsole to the Management Server.
     2	From the left navigation panel, click Gateways & Servers.
     3	Open the applicable VSX Gateway object.
     4	From the left tree, click Physical Interfaces.
     5	Click Add.
     6	Add the new interface. Important - Enter the same name (case sensitive) you see in the Gaia settings of this Security Group.
     7	Click OK.
     8	Install the Access Control Policy on this VSX Gateway object.
     9	Configure the Bond interface in the applicable Virtual System.
     10	Install the Access Control Policy on the applicable Virtual System object.

     Note - For more information, see the R81.20 VSX Administration Guide.