Technical data

Working with Link Aggregation
Check Point VSX Administration Guide NGX R67 | 137
Reconfiguring the Bond using SmartDashboard
To configure the newly created bond:
1. In the SmartDashboard navigation tree, double-click the VSX gateway or cluster object.
2. In the Properties window, select the Physical Interfaces branch.
3. Click Add to add the new Bond to the cluster object.
a) In the Physical Interface Properties window, enter the bond name. This name must be exactly the
same as the name assigned to the bond when it was created with the sysconfig.
b) If the bond is a VLAN trunk, enable the VLAN Trunk option.
4. On the Topology page:
a) Double-click the interface(s) to be replaced.
b) Select the bond interface from the Interface list.
c) Click OK to push the configuration.
5. Install the policy.
Reconfiguring Topology using vsx_util change_interfaces
To reconfigure objects using vsx_util change_interfaces:
Important - All Domain Management Servers must be unlocked in
order for this operation to succeed.
1. Close SmartDashboard for all Multi-Domain Security Management Domain Management Servers using
the designated interface.
2. On the management server, enter the Expert Mode and execute the vsx_util change_interfaces
command.
3. Enter the Security Management Server, or Multi-Domain Security Management main Domain
Management Server IP address.
4. Enter the administrator name and password as requested.
5. Enter the VSX cluster object name.
6. Select Apply changes to the management database and to the VSX Gateway/Cluster members
immediately.
7. When prompted, select the interface to be replaced.
8. When prompted, select the replacement bond interface.
9. If you wish to replace additional interfaces, enter "y" when prompted and repeat steps 6 and 7.
10. To complete the process, enter "n".
Link Aggregation - Load Sharing Mode
In This Section
Creating a Bond in a New Deployment 138
Upgrading an Existing Deployment 141
Configuring Cisco Switches for Load Sharing 145
In Load Sharing mode, Link Aggregation supplies load sharing, in addition to High Availability. All slave
interfaces are active, and connections are balanced between the bond's slave interfaces, similar to the way
ClusterXL balances connections between cluster members.
In Load Sharing mode, each connection is assigned to a specific slave interface. For the individual
connection, only one slave interface is active. On failure of that interface, the bond does failover of the
connection to one of the other interfaces, which adds the failed interface's connection to the connections it is
already handling.
Connections are balanced between slave interfaces according to network layers three and four, and follow
one of these standards: