Physical Interfaces

This section has configuration procedures and examples for defining different types of interfaces on a GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. platform.

Gaia automatically identifies physical interfaces (NICs) installed on the computer.

You cannot add or delete a physical interface in the Gaia PortalClosed Web interface for the Check Point Gaia operating system. or Gaia ClishClosed The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

You cannot add, change or remove physical interface cards while the Gaia computer is running.

Step

Instructions

1

Turn off the Gaia computer:

  • In Gaia Portal:

    Click Maintenance > Shut Down, and click Halt

  • In Gaia Clish:

    Run: halt

2

Add, remove, or replace the interface cards.

3

Turn on the Gaia computer.

Gaia automatically identifies the new or changed physical interfaces and assigns an interface name. The physical interfaces show in the list in the Gaia Portal.

Configuring Physical Interfaces in Gaia Portal

This section includes procedures for changing physical interface parameters in the Gaia Portal.

Note - There are settings that you can configure only in Gaia Clish.

Step

Instructions

1

In the navigation tree, click Network Management > Network Interfaces.

2

Select an interface from the list and click Edit.

3

Select the Enable option to set the interface status to UP.

4

In the Comment field, enter the applicable comment text (up to 100 characters).

5

On the IPv4 tab, do one of these:

  • Select Obtain IPv4 address automatically to get the IPv4 address from the DHCPv4 server.

  • Enter the IPv4 address and subnet mask in the applicable fields.

6

On the IPv6 tab (optional), do one of these:

  • Select Obtain IPv6 address automatically to get the IPv6 address from the DHCPv6 server.

  • Enter the IPv6 address and mask length in the applicable fields.

Important - First, you must enable the IPv6 Support and reboot (see System Configuration). R81 does not support IPv6 Address on Gaia Management InterfaceClosed (1) Interface on a Gaia Security Gateway or Cluster member, through which Management Server connects to the Security Gateway or Cluster member. (2) Interface on Gaia computer, through which users connect to Gaia Portal or CLI. (Known Limitation 01622840).

7

On the Ethernet tab:

  • Select Auto Negotiation, or select a link speed and duplex setting from the list.

  • In the Hardware Address field, enter the Hardware MAC address (if not automatically received from the NIC).

    Caution - Do not manually change the MAC address unless you are sure that it is incorrect or has changed. An incorrect MAC address can lead to a communication failure.

  • In the MTU field, enter the applicable Maximum Transmission Unit (MTU) value (minimal value is 68, maximal value is 16000, and default value is 1500).

  • Select Monitor Mode, if needed.

    For configuration procedure, see the R81 Installation and Upgrade Guide > Chapter Special Scenarios for Security Gateways > Section Deploying a Security Gateway in Monitor Mode.

8

Click OK.

Configuring Physical Interfaces in Gaia Clish

Syntax

set interface <Name of Physical Interface>
      auto-negotiation {on | off}
      comments "Text"
      ipv4-address <IPv4 Address> {subnet-mask <Mask> | mask-length <Mask Length>}
      ipv6-address <IPv6 Address> mask-length <Mask Length>
      ipv6-autoconfig {on | off}
      link-speed {10M/half | 10M/full | 100M/half | 100M/full | 1000M/full | 10000M/full}
      mac-addr <MAC Address>
      monitor-mode {on | off}
      mtu <68-16000 | 1280-16000>
      rx-ringsize <0-4096>
      state {on | off}
      tx-ringsize <0-4096>

show interfaces all

show interface <Name of Physical Interface>

show interface <Name of Physical Interface><SPACE><TAB>

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Parameters

Parameter

Description

interface <Name of Physical Interface>

Specifies a physical interface.

auto-negotiation {on | off}

Configures automatic negotiation of interface link speed and duplex settings:

  • on - Enabled

  • off - Disabled

comments "Text"

Configures an optional free text comment.

  • Write the text in double quotes.

  • Text must be up to 100 characters.

  • This comment appears in the Gaia Portal and in the output of the "show configuration" command.

ipv4-address <IPv4 Address>

Configures the IPv4 address.

ipv6-address <IPv6 Address>

Configures the IPv6 address.

Important - First, you must enable the IPv6 Support and reboot (see System Configuration). R81 does not support IPv6 Address on Gaia Management Interface (Known Limitation 01622840).

subnet-mask <Mask>

Configures the IPv4 subnet mask using dotted decimal notation (X.X.X.X).

mask-length <Mask Length>

Configures the IPv4 or IPv6 subnet mask length using the CIDR notation (integer between 2 and 32).

ipv6-autoconfig {on | off}

Configures if this interface gets an IPv6 address from a DHCPv6 Server:

  • on - Gets an IPv6 address from a DHCPv6 Server

  • off - Does not get an IPv6 address from a DHCPv6 Server (you must assign it manually)

Important - First, you must enable the IPv6 Support and reboot (see System Configuration).

link-speed {10M/half | 10M/full | 100M/half | 100M/full | 1000M/full | 1000M/full}

Configures the interface link speed and duplex status.

Available speed and duplex combinations are:

  • 10M/half

  • 10M/full

  • 100M/half

  • 100M/full

  • 1000M/full

  • 10000M/full

mac-addr <MAC Address>

Configures the hardware MAC address.

monitor-mode {on | off}

Configures Monitor Mode on this interface:

  • on - Enabled

  • off - Disabled

Default: off

For configuration procedure, see the R81 Installation and Upgrade Guide > Chapter Special Scenarios for Security Gateways > Section Deploying a Security Gateway in Monitor Mode.

mtu <68-16000 | 1280-16000>

Configures the Maximum Transmission Unit size for an interface.

For IPv4:

  • Range: 68 - 16000 bytes

  • Default: 1500 bytes

For IPv6:

  • Range: 1280 - 16000 bytes

  • Default: 1500 bytes

rx-ringsize <0-4096>

Configures the receive buffer size.

  • Range: 0 - 4096 bytes

  • Default: Depends on the interface driver

state {on | off}

Configures the interface state:

  • on - Enabled

  • off - Disabled

tx-ringsize <0-4096>

Configures the transmit buffer size.

  • Range: 0 - 4096 bytes

  • Default: Depends on the interface driver

 
gaia> set interface eth2 ipv4-address 40.40.40.1 subnet-mask 255.255.255.0
gaia> set interface eth2 mtu 1400
gaia> set interface eth2 state on
gaia> set interface eth2 link-speed 100M/full