Adding a Virtual Device

Description

This command adds a new Virtual DeviceClosed Logical object that emulates the functionality of a type of physical network object. Virtual Device can be on of these: Virtual Router, Virtual System, or Virtual Switch. object:

Syntax

add vd name <Name of Virtual Device Object> vsx <Name of VSX Gateway or VSX Cluster Object > [type {vs | vsbm | vsw | vr}] [vs_mtu <MTU>] [instances <Number of IPv4 CoreXL Firewall instances>] [instances6 <Number of IPv6 CoreXL Firewall instances>] [main_ip <Main IPv4 Address>] [main_ip6 <Main IPv6 Address>] [calc_topo_auto {true | false}]

Parameters

Parameter

Value

Notes

name <Name of Virtual Device Object>

Object name

Defines the name of the Virtual Device object.

Mandatory parameter, if this is the first command in a transaction.

vsx <Name of VSX Gateway or VSX Cluster Object >

Parent object name

Defines the name of the applicable VSX GatewayClosed Physical server that hosts VSX virtual networks, including all Virtual Devices that provide the functionality of physical network devices. It holds at least one Virtual System, which is called VS0. or VSXClosed Virtual System Extension. Check Point virtual networking solution, hosted on a computer or cluster with virtual abstractions of Check Point Security Gateways and other network devices. These Virtual Devices provide the same functionality as their physical counterparts. ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing. object, in which you create this Virtual Device.

You cannot use spaces or Check Point reserved words.

Mandatory parameter.

type {vs | vsbm | vsw | vr}

Type of Virtual Device

Defines the type of the Virtual Device:

  • vs - Virtual System (default)

  • vsbm - Virtual System in Bridge Mode

  • vsw - Virtual Switch

  • vr - Virtual Router

vs_mtu <MTU>

Integer

Defines the Global MTU value for all interfaces.

This parameter is applicable only for a:

  • Virtual System in Bridge Mode (type vsbm)

  • Virtual Switch (type vsw)

Default is 1500 bytes.

Note - For a Virtual Switch, if you do not add a VLAN or physical interface in the same transaction, the utility ignores this value.

instances <Number of IPv4 CoreXL Firewall instances>

Integer

Defines the number of IPv4 CoreXLClosed Performance-enhancing technology for Security Gateways on multi-core processing platforms. Multiple Check Point Firewall instances are running in parallel on multiple CPU cores. Firewall instances.

This parameter is applicable only for a:

  • Virtual System (type vs)

  • Virtual System in Bridge Mode (type vsbm)

Default is 1.

For more information about CoreXL, see R81 Performance Tuning Administration Guide.

instances6 <Number of IPv6 CoreXL Firewall instances>

Integer

Defines the number of IPv6 CoreXL Firewall instances.

This parameter is applicable only for a:

  • Virtual System (type vs)

  • Virtual System in Bridge Mode (type vsbm)

Default is 1.

For more information about CoreXL, see R81 Performance Tuning Administration Guide.

main_ip <Main IPv4 Address>

IPv4 Address

Defines the main IPv4 Address of the Virtual Device object.

This parameter is applicable only for a:

  • Virtual System (type vs)

  • Virtual Router (type vr)

Note - If you do not specify this value explicitly, the utility uses the IPv4 address of the first interface added to the new device.

main_ip6 <Main IPv6 Address>

IPv6 Address

Defines the main IPv6 Address of the Virtual Device object.

This parameter is applicable only for a:

  • Virtual System (type vs)

  • Virtual Router (type vr)

Note - If you do not specify this value explicitly, the utility uses the IPv6 address of the first interface added to the new device.

calc_topo_auto {true | false}

  • true

  • false

Defines how to calculate topology based on routes:

  • true - Automatically calculate topology based on routes (default)

  • false - Does not calculate topology based on routes (administrator can configure it manually)

This parameter is applicable only for a:

  • Virtual System (type vs)

  • Virtual Router (type vr)

Example - Adding a Virtual Switch "VirtSwitch1" to the VSX Gateway "VSX_GW1"

vsx_provisioning_tool -s localhost -u admin -p mypassword -o add vd name VirtSwitch1 vsx VSX_GW1 type vsw