vsx_util change_interfaces

Description

Automatically replaces designated existing interfaces with new interfaces on all Virtual Devices, to which the existing interfaces connect.

This command is useful when converting a deployment to use Link Aggregation, especially where VLANs connect to many Virtual Devices.

Important - Before you run the vsx_util commands:

Syntax

vsx_util change_interfaces

Required Input

The applicable VSX Gateway or VSX Cluster object.
Where to apply the change (Management Server only, or Management Server and VSX Gateway / VSX Cluster Members).
Name of the interface to be replaced.
Name of the new (replacement) interface.

Comments

Execute the command and follow the instructions on the screen.
This command supports the resume feature.
You can use this command to migrate a VSX deployment from an Open Server Physical computer manufactured and distributed by a company, other than Check Point. to a Check Point appliance by using the Management Only mode.
Refer to the Notes section below for additional information.

Procedure

Step

Instructions

Close all SmartConsole clients that are connected to the Security Management Server or Domain Management Servers.

Connect to the command line on the Management Server.

mdsenv <IP address or Name of Domain Management Server>

Run:

vsx_util change_interfaces

Enter the IP address of the Security Management Server or Main Domain Management Server.

Enter the Management Server administrator username and password.

Select the VSX Gateway (VSX Cluster) object.

When prompted, select one of the following options:

Apply changes to the management database and to the VSX Gateway/Cluster members immediately

Changes the interface on the Management Server and on the VSX Gateway (each VSX Cluster Member Security Gateway that is part of a cluster.).
Apply changes to the management database only

Changes the interface on the Management Server only.

You must run the vsx_util reconfigure command to push the updated VSX configuration to VSX Gateways (each VSX Cluster Member).

Select the interface to be replaced.

Select the new (replacement) interface.

You can optionally add a new interface, if you select the A new interface name option.

This interface must physically exist on the VSX Gateway (all VSX Cluster Members).

Otherwise, the operation fails.
At the prompt, enter the new interface name.

If the new interface is a Bond interface, the interface name must match the name of the configured Bond interface exactly.

The command prompts you:

Would you like to change another interface? (y|n) [n]:

If you selected the option Apply changes to the management database only, you can remove the old (replaced) interfaces from the management database.

When prompted, enter y:

Would you like to remove the old interfaces from the database? (y|n) [n]: y

Reboot the VSX Gateway (all VSX Cluster Members).

Notes

The option "Apply changes to the management database and to the VSX Gateway/Cluster members immediately" verifies connectivity between the Management Server and the VSX Gateway or VSX Cluster Members. In the event of a connectivity failure one of the following actions occur:
1. If all of the newly changed interfaces fail to establish connectivity, the process terminates unsuccessfully.
2. If one or more interfaces successfully establish connectivity, while one or more other interfaces fail, you may optionally continue the process.
  
  In this case, those interfaces for which connectivity was established successfully will be changed.
  
  For those interfaces that failed, you must then resolve the issue and then run the vsx_util reconfigure command to complete the process.
If you select the option "Apply changes to the management database only", you can select one of these:
- Another interface from list (if any are available).
- Option to add a new interface.