LLDP

You can configure Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. to advertise and receive information from other network devices over the Link Layer Discovery Protocol (LLDP) protocol.

The LLDP is a vendor-neutral link layer protocol that network devices use to advertise their identity, capabilities (and so on) and to receive information about their neighbors on a local area network based on IEEE 802 standard.

The gathered information may include:

System Name
System Description
System Capabilities (switching, routing, etc.)
Port Description
Management Address

Important - By default, LLDP is disabled in the Gaia operating system.

Configuring LLDP in Gaia Portal

Step

Instructions

In the navigation tree, click System Management > LLDP.

In the Type Length Value (TLV) section, select which information to send in the LLDP packets, and click Apply:

System Name

To send the Gaia "<Hostname>.<Domainname>".

Note - To configure the domain name, see System Name.
System Description

To send the formatted output of the "uname -msr" command

(which contains kernel name, kernel release, and kernel machine hardware name).
System Capabilities

To send the string "station" (regardless of the Check Point configuration).
Port Description

To send the name of the interface.
Management Address

To send the IP address of the interface.

In the Timers section, configure the applicable values, and click Apply:

Transmit Interval

This interval controls how frequently Gaia To send LLDP packets on the selected interfaces.

Enter a value between 8 and 32768 (default is 30) seconds.
Hold Time Multiplier

This multiplier controls the Time-to Live (TTL) of the LLDP packets:

TTL = (Transmit Interval) x (Hold Time Multiplier).

This TTL is the duration, for which the receiving neighbor stores the LLDP information in its database.

Enter a value between 2 and 10 (default is 4).

Note - These values are global and apply to all selected interfaces.

In the Interfaces section, add the applicable interfaces.

To add all configured interfaces:
1. Click Add All.
2. Click Yes to confirm.
3. The default LLDP mode for all interfaces is Transmit and Receive.
  
  To change the LLDP mode:
  1. Select an interface.
  2. Click Edit.
  3. Select the applicable LLDP mode.
  4. Click Save.
To add a specific interface:
1. Click Add.
2. In the Interface Name field, select an interface.
3. In the Mode field, select the applicable LLDP mode.
4. Click Save.

The available LLDP modes are:

Transmit and Receive - The interface transmits and receives the LLDP packets.
Transmit only - The interface only transmits the LLDP packets, but does not receive the LLDP packets.
Receive only - The interface only receives the LLDP packets, but does not transmit the LLDP packets.

In the LLDP Configuration section, select Enable LLDP, and click Apply.

Configuring LLDP in Gaia Clish

Syntax

To configure LLDP:

set lldp
      hold-time-multiplier <2-10>
      interface <Name of Interface>
            receive {on | off}
            transmit {on | off}
            transmit-and-receive {on | off}
      state {on | off}
      tlv
            port-description {on | off}
            system-name {on | off}
            system-description {on | off}
            system-capabilities {on | off}
            management-address {on | off}
      transmit-interval <8-32768>

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

To show the LLDP configuration:

show lldp status
            interface <Name of Interface>
            timers
            tlv

Parameters

Parameter	Description
`hold-time-multiplier`	This multiplier controls the Time-to Live (TTL) of the LLDP packets: TTL = (Transmit Interval) x (Hold Time Multiplier). This TTL is the duration, for which the receiving neighbor stores the LLDP information in its database. Enter a value between 2 and 10 (default is 4).
`interface <Name of Interface>`	Specifies the name of an interface, which sends or receives the LLDP packets.
`interface <Name of Interface> receive {on \| off}`	Enables (`on`) and disables (`off`) the LLDP mode on the interface as "receive only". The interface only receives the LLDP packets, but does not transmit the LLDP packets.
`interface <Name of Interface> transmit {on \| off}`	Enables (`on`) and disables (`off`) the LLDP mode on the interface as "transmit only". The interface only transmits the LLDP packets, but does not receive the LLDP packets.
`interface <Name of Interface> transmit-and-receive {on \| off}`	Enables (`on`) and disables (`off`) the LLDP mode on the interface as "transmit and receive". The interface transmits and receives the LLDP packets.
`state {on \| off}`	Enables (`on`) and disables (`off`) the LLDP on the specified interface.
`tlv port-description {on \| off}`	Enables (`on`) and disables (`off`) the LLDP-enabled interface to send the Port Description information in the LLDP packets. Sends the name of the interface.
`tlv system-name {on \| off}`	Enables (`on`) and disables (`off`) the LLDP-enabled interface to send the System Name information in the LLDP packets. Sends the Gaia "`<Hostname>.<Domainname>`". Note - To configure the domain name, see System Name.
`tlv system-description {on \| off}`	Enables (`on`) and disables (`off`) the LLDP-enabled interface to send the System Description information in the LLDP packets. Sends the formatted output of the "`uname -msr`" command (which contains kernel name, kernel release, and kernel machine hardware name).
`tlv system-capabilities {on \| off}`	Enables (`on`) and disables (`off`) the LLDP-enabled interface to send the System Capabilities information in the LLDP packets. Sends the string "`station`" (regardless of the Check Point configuration).
`tlv management-address {on \| off}`	Enables (`on`) and disables (`off`) the LLDP-enabled interface to send the Management Address information in the LLDP packets. Send the IP address of the interface.
`transmit-interval <8-32768>`	This interval controls how frequently the LLDP-enabled interface sends the LLDP packets. Enter a value between 8 and 32768 (default is 30) seconds.
`timers`	Shows the configured LLDP timers: Hold Time Multiplier Transmit Interval

Example - Viewing the LLDP status

MyGaia> show lldp status
LLDP server  enabled
Interfaces
eth0 - receive
eth1 - receive and transmit
eth2 - transmit
Optional Information
port-description off
system-name on
system-description off
system-capabilities on
management-address on
Timers
Hold time multiplier 5
Transmit interval 20
MyGaia>

Viewing the LLDP neighbors in the Expert mode

Connect to the command line on Gaia.
Log in to the Expert mode.

Run:

lldpneighbors