LLDP for Management Server and Security Gateway

This section applies to all configured interfaces on these:

  • Management Servers, Log Server, SmartEvent Servers

  • Security Gateways, Cluster Members

Important - Scalable Platforms (ElasticXL, Maestro, and Chassis) do not support this feature (Known Limitation MBS-10753).

For a Maestro Orchestrator, see LLDP on Maestro Orchestrator.

You can configure Gaia to advertise and receive information from other network devices over the Link Layer Discovery Protocol (LLDP) protocol.

The LLDP is a vendor-neutral link layer protocol that network devices use to advertise their identity, capabilities (and so on) and to receive information about their neighbors on a local area network based on IEEE 802 standard.

The gathered information may include:

  • System Name

  • System Description

  • System Capabilities (switching, routing, etc.)

  • Port Description

  • Management Address

Important - By default, LLDP is disabled in the Gaia operating system.

Configuring LLDP in Gaia Portal on a Management Server / Security Gateway

Step

Instructions

1

In the navigation tree, click System Management > LLDP.

2

In the Type Length Value (TLV) section, select which information to send in the LLDP packets, and click Apply:

  • System Name

    To send the Gaia "<Hostname>.<Domainname>".

    Note - To configure the domain name, see System Name.

  • System Description

    To send the formatted output of the "uname -msr" command

    (which contains the kernel name, kernel release, and kernel machine hardware name).

  • System Capabilities

    To send the string "station" (regardless of the Check Point configuration).

  • Port Description

    To send the name of the interface.

  • Management Address

    • Select Send Management interface IP to send the IP address of the Gaia Management interface only.

    • Select Send Configured interface IP to send the IP address of each selected interface.

3

In the Timers section, configure the applicable values, and click Apply:

  • Transmit Interval

    This interval controls how frequently Gaia To send LLDP packets on the selected interfaces.

    Enter a value between 8 and 32768 (default is 30) seconds.

  • Hold Time Multiplier

    This multiplier controls the Time-to Live (TTL) of the LLDP packets:

    TTL = (Transmit Interval) x (Hold Time Multiplier).

    This TTL is the duration, for which the receiving neighbor stores the LLDP information in its database.

    Enter a value between 2 and 10 (default is 4).

Note - These values are global and apply to all selected interfaces.

4

In the Interfaces section, add the applicable interfaces.

  • To add all interfaces:

    1. Click Add All.

    2. Click Yes to confirm.

    3. The default LLDP mode for all interfaces is Transmit and Receive.

      To change the LLDP mode:

      1. Select an interface.

      2. Click Edit.

      3. Select the applicable LLDP mode.

      4. Click Save.

  • To add a specific interface:

    1. Click Add.

    2. In the Interface Name field, select an interface.

    3. In the Mode field, select the applicable LLDP mode.

    4. Click Save.

The available LLDP modes are:

  • Transmit and Receive

    The interface transmits and receives the LLDP packets.

  • Transmit only

    The interface only transmits the LLDP packets, but does not receive the LLDP packets.

  • Receive only

    The interface only receives the LLDP packets, but does not transmit the LLDP packets.

5

In the LLDP Configuration section:

  1. Select Enable LLDP.

  2. Click Apply.

Configuring LLDP in Gaia Clish on Management Server / Security Gateway

Workflow:

Step

Instructions

1

Enable the LLDP:

set lldp state on

2

Configure the required LLDP settings with the "set lldp" command.

3

Save the changes in the Gaia database:

save config

Syntax

  • To configure LLDP:

    set lldp

          hold-time-multiplier <2-10>

          interface <Name of Interface>

                receive {on | off}

                transmit {on | off}

                transmit-and-receive {on | off}

          state {on | off}

          tlv

                port-description {on | off}

                system-name {on | off}

                system-description {on | off}

                system-capabilities {on | off}

                management-address {on from {configured-interface | mgmt-interface} | off}

          transmit-interval <8-32768>

    Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently. Scalable Platforms save the changes automatically.

  • To show the LLDP configuration:

    show lldp

          peers

          status

                interface <Name of Interface>

                timers

                tlv

Parameters

Parameter

Description

hold-time-multiplier

This multiplier controls the Time-to Live (TTL) of the LLDP packets:

TTL = (Transmit Interval) x (Hold Time Multiplier).

This TTL is the duration, for which the receiving neighbor stores the LLDP information in its database.

Enter a value between 2 and 10 (default is 4).

interface <Name of Interface>

Specifies the name of an interface, which sends or receives the LLDP packets.

interface <Name of Interface> receive {on | off}

Enables (on) and disables (off) the LLDP mode on the interface as "receive only".

The interface only receives the LLDP packets, but does not transmit the LLDP packets.

interface <Name of Interface> transmit {on | off}

Enables (on) and disables (off) the LLDP mode on the interface as "transmit only".

The interface only transmits the LLDP packets, but does not receive the LLDP packets.

interface <Name of Interface> transmit-and-receive {on | off}

Enables (on) and disables (off) the LLDP mode on the interface as "transmit and receive".

The interface transmits and receives the LLDP packets.

state {on | off}

Enables (on) and disables (off) the LLDP on the specified interface.

tlv port-description {on | off}

Enables (on) and disables (off) the LLDP-enabled interface to send the Port Description information in the LLDP packets.

Sends the name of the interface.

tlv system-name {on | off}

Enables (on) and disables (off) the LLDP-enabled interface to send the System Name information in the LLDP packets.

Sends the Gaia "<Hostname>.<Domainname>".

Note - To configure the domain name, see System Name.

tlv system-description {on | off}

Enables (on) and disables (off) the LLDP-enabled interface to send the System Description information in the LLDP packets.

Sends the formatted output of the "uname -msr" command

(which contains kernel name, kernel release, and kernel machine hardware name).

tlv system-capabilities {on | off}

Enables (on) and disables (off) the LLDP-enabled interface to send the System Capabilities information in the LLDP packets.

Sends the string "station" (regardless of the Check Point configuration).

tlv management-address {on | off}

Enables (on) and disables (off) the LLDP-enabled interface to send the Management Address information in the LLDP packets.

  • from mgmt-interface - Sends the IP address of the Gaia Management interface only.

  • from configured-interface - Sends the IP address of each LLDP-enabled interface.

transmit-interval <8-32768>

This interval controls how frequently the LLDP-enabled interface sends the LLDP packets.

Enter a value between 8 and 32768 (default is 30) seconds.

timers

Shows the configured LLDP timers:

  • Hold Time Multiplier

  • Transmit Interval

Example - Viewing the LLDP status

MyGaia> show lldp status
LLDP server  enabled
Interfaces
eth0 - receive
eth1 - receive and transmit
eth2 - transmit
Optional Information
port-description off
system-name on
system-description off
system-capabilities on
management-address on
Timers
Hold time multiplier 5
Transmit interval 20
MyGaia>