Aliases

This section shows you how to configure an alias in the Gaia Portal and Gaia Clish.

Interface aliases let you assign more than one IPv4 address to physical or virtual interfaces (Bonds, Bridges, VLANs, and Loopbacks).

Notes:

  • ClusterXL does not support aliases.

  • You cannot change settings of an existing interface alias.

Configuring Aliases in Gaia Portal

Note - This section does not apply to Scalable Platforms (ElasticXL, Maestro, and Chassis).

Step

Instructions

1

In the navigation tree, click Network Management > Network Interfaces.

2

Click Add > Alias.

3

On the IPv4 tab, enter the IPv4 address and subnet mask.

4

On the Alias tab, select the applicable interface, to which this alias is assigned.

5

Click OK.

Note - The new alias interface name is automatically created by adding a sequence number to the interface name. For example, the name of first alias added to eth1 is eth1:1. The second alias added is eth1:2, and so on.

Step

Instructions

1

In the navigation tree, click Network Management > Network Interfaces.

2

Select an interface alias and click Delete.

3

Click OK, when the confirmation message shows.

Configuring Aliases in Gaia Clish

Note - This section does not apply to Scalable Platforms (ElasticXL, Maestro, and Chassis).

Syntax

add interface <Name of Interface> alias <IPv4 Address>/<Mask Length>

Note - A new alias interface name is automatically created by adding a sequence number to the original interface name. For example, the name of first alias added to eth1 is eth1:1. The second alias added is eth1:2, and so on.

show interface <Name of Interface> aliases

delete interface <Name of Interface> alias <Name of Alias Interface>

Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently. Scalable Platforms save the changes automatically.

Parameters

Parameter

Description

<Name of Interface>

Specifies the name of the interface, on which to create an alias IPv4 address

<IPv4 Address>

Assigns the alias IPv4 address

<Mask Length>

Configures alias IPv4 subnet mask length using the CIDR notation (integer between 2 and 32)

<Name of Alias Interface>

Specifies the name of the alias interface in the format <IF>:XX, where XX is the automatically assigned sequence number

gaia> add interface eth1 alias 10.10.99.1/24

gaia> show interface eth1 aliases

gaia> delete interface eth1 alias eth1:2

Configuring Aliases on Scalable Platforms

Notes:

  • This section applies only to Scalable Platforms (ElasticXL, Maestro, and Chassis).

  • The feature is not supported in VSX mode.

Important:

  • To control the support of aliases, you use the kernel parameter fwha_arp_support_aliases:

    Value of the Kernel Parameter

    Gaia Behavior on Scalable Platforms

    fwha_arp_support_aliases=0

    This is the default.

    Support of aliases is disabled.

    fwha_arp_support_aliases=1

    Support of aliases is enabled.

    Gaia OS sends GARP packets from alias interfaces as well.

  • You can configure aliases only in Gaia gClish of the applicable Security Group.

  • You cannot change settings of an existing interface alias. You must delete it and add a new alias.

For additional information, see sk167073.

Step

Instructions

1

Set the value of the kernel parameter fwha_arp_support_aliases to 1:

  1. Connect to the command line on the Security Group.

  2. Log in to the Expert mode.

  3. Configure the value temporarily (does not survive reboot):

    g_fw ctl set int fwha_arp_support_aliases 1

  4. Make sure the new value is set:

    g_fw ctl get int fwha_arp_support_aliases

  5. Configure the value permanently (requires reboot - you can reboot later at any time):

    g_update_conf_file $FWDIR/boot/modules/fwkern.conf fwha_arp_support_aliases=1

2

In Gaia gClish of the applicable Security Group, add the applicable interface alias:

  1. Connect to the command line on the Security Group.

  2. Log in to Gaia Clish.

  3. On Scalable Platforms, go to Gaia gClish:Type gclish and press Enter.

  4. Add the applicable interface alias:

    add interface <Name of Interface> alias <IPv4 Address>/<Mask Length>

    Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently. Scalable Platforms save the changes automatically.

    Note - A new alias interface name is automatically created by adding a sequence number to the original interface name. For example, the name of first alias added to eth1 is eth1:1. The second alias added is eth1:2, and so on.

3

Update the topology of the Security Gateway object in SmartConsole:

  1. Connect with SmartConsole to the Management Server that manages this Security Group.

  2. Open the applicable Security Gateway object.

  3. From the left tree, click Network Management.

  4. Click Get Interfaces > Get Interfaces with Topology.

    Best Practice - In the Topology > Leads To section, use the default topology settings in the interface, on which you add an interface alias (and not the Override option). Otherwise, it is not possible to link alias networks to the applicable interface.

  5. Make sure the information is correct and click Accept.

  6. Click OK.

4

Install the Access Control Policy on this Security Gateway object.

5

Make sure the configuration is consistent on all Security Group Members:

  1. Connect to the command line on the Security Group.

  2. Log in to the Expert mode.

  3. Run:

    config_verify -v

Step

Instructions

1

In Gaia gClish of the applicable Security Group, delete the applicable interface alias:

  1. Connect to the command line on the Security Group.

  2. Log in to Gaia Clish.

  3. On Scalable Platforms, go to Gaia gClish:Type gclish and press Enter.

  4. Add the applicable interface alias:

    delete interface <Name of Interface> alias <Name of Alias Interface>

    Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently. Scalable Platforms save the changes automatically.

2

Update the topology of the Security Gateway object in SmartConsole:

  1. Connect with SmartConsole to the Management Server that manages this Security Group.

  2. Open the applicable Security Gateway object.

  3. From the left tree, click Network Management.

  4. Click Get Interfaces > Get Interfaces with Topology.

    Best Practice - In the Topology > Leads To section, use the default topology settings in the interface, on which you delete an interface alias (and not the Override option).

  5. Make sure the information is correct and click Accept.

  6. Click OK.

3

Install the Access Control Policy on this Security Gateway object.

4

Make sure the configuration is consistent on all Security Group Members:

  1. Connect to the command line on the Security Group.

  2. Log in to the Expert mode.

  3. Run:

    config_verify -v

Step

Instructions

1

Connect to the command line on the applicable Security Group.

2

Log in to Gaia Clish.

3

On Scalable Platforms, go to Gaia gClish:Type gclish and press Enter.

4

View the interface aliases:

show interface <Name of Interface> aliases

Parameter

Description

<Name of Interface>

Specifies the name of the interface, on which to create an alias IPv4 address

<IPv4 Address>

Assigns the alias IPv4 address

<Mask Length>

Configures alias IPv4 subnet mask length using the CIDR notation (integer between 2 and 32)

<Name of Alias Interface>

Specifies the name of the alias interface in the format <IF>:XX, where XX is the automatically assigned sequence number

[Global] HostName-ch01-01 > add interface eth1 alias 10.10.99.1/24

[Global] HostName-ch01-01 > show interface eth1 aliases

[Global] HostName-ch01-01 > delete interface eth1 alias eth1:2