Working with Jumbo Frames

The 40000 / 60000 chassis support Jumbo Frames with a total size of:

Note - Carefully calculate the MTU. For example: IPsec or GRE traffic adds bytes to the header and this leaves fewer bytes for the data payload.

Configuring Support for Jumbo Frames on Security Gateway

Description

You can configure support for Jumbo Frames for each applicable interface on an SGM.

Notes:

This command can take several seconds to work.
In a Dual Chassis environment, this command configures support for Jumbo Frames on both Chassis.

Syntax in Gaia gClish

set interface <Name of Interface> mtu <MTU Size>

Parameters

Parameter	Description
`<Name of Interface>`	Interface name as defined in the Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. operating system.
`<MTU Size>`	Valid values to enable the support for Jumbo Frames: For SSM440: 1501 - 9,416 bytes For SSM160: 1501 - 12,200 bytes For SGM400: 1501 - 9,702 bytes Valid values to disable the support for Jumbo Frames on all SSM and SGM models: 68 - 1500 bytes

Parameter

Description

<Name of Interface>

<MTU Size>

Valid values to enable the support for Jumbo Frames:

Valid values to disable the support for Jumbo Frames on all SSM and SGM models:

To enable the support for Jumbo Frames on a VSX Gateway:

Step	Instructions
1	Connect with SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on. to the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. that manages the VSX Gateway Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0., or the applicable Virtual Device.
2	From the left navigation panel, click Gateways & Servers.
3	Open the VSX Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. Gateway object, or the applicable Virtual Device object.
4	From the left tree, click Topology.
5	Edit the applicable interface.
6	On the General tab, set the MTU to 1501 or a greater value. Valid values to enable the support for Jumbo Frames: For SSM440: 1501 - 9,416 bytes For SSM160: 1501 - 12,200 bytes For SGM400: 1501 - 9,702 bytes
7	Click OK.
8	Install Access Control Policy on the VSX Gateway object, or the applicable Virtual Device object.

To disable the support for Jumbo Frames on a VSX Gateway:

Step	Instructions
1	Connect with SmartConsole to the Management Server that manages the VSX Gateway, or the applicable Virtual Device.
2	From the left navigation panel, click Gateways & Servers.
3	Open the VSX Gateway object, or the applicable Virtual Device object.
4	From the left tree, click Topology.
5	Edit the applicable interface.
6	On the General tab, set the MTU to a value between 68 and 1500 bytes.
7	Click OK.
8	Install Access Control Policy on the VSX Gateway object, or the applicable Virtual Device object.

To run the validation test on the SSM:

Step

Instructions

Show the Jumbo Frames configuration on the specified SSM:

asg_chassis_ctrl jumbo_frames show <SSM ID>

Show the configured MTU on the specified SSM port:

asg_chassis_ctrl get_port_mtu <SSM ID> <Port ID>

Description

You can confirm configuration of Jumbo Frames on SGMs and SGM interfaces.

Use the "asg_jumbo_conf show" command in the Expert mode to:

Syntax

asg_jumbo_conf show [-v]

Parameters

Parameter	Description
`-v`	Detailed report (verbose)