Technical data

Configuring VSX

Check Point VSX Administration Guide NGX R67 | 45

To configure the external and internal interfaces:

1. Select the desired interfaces for the internal and external networks from the appropriate list.

If the selected Interface is a VLAN interface, enter the same VLAN tag in both the external and internal

VLAN Tag fields. This field is not available for non-VLAN interfaces.

2. Define the topology for the internal interface as follows:

 Select Not Defined if you do not wish to define an IP address.

 Select Specific and then select a IP address definition from the list. IP address definitions can be

based on object groups or predefined networks that define the topology.

3. If you wish to create a new IP address definition perform the following steps:

a) Select Specific and click New.

b) Select Group to define an object group or Network to define network properties. The appropriate

window appears. Refer to the online help for details regarding either of these options.

4. Enable the Layer-3 bridge interface monitoring option if you wish to enable layer 3 network fault

detection for this Virtual System.

a) Enter an IP address and subnet mask in the designated fields for this Virtual System, which

continuously monitors the specified network for faults or connectivity issues. The IP address/subnet

should define the network on which the Virtual System resides.

Note - When creating a Virtual System in the bridge mode on

an IPSO cluster, you must enable Layer-3 bridge interface

monitoring. The IP address to be monitored should reside on a

different subnet than the one that handles bridge traffic.

5. Complete the definition process ("Completing the Definition" on page 47).

Custom Configuration or Override - Non-Bridge Mode

If you used the Custom Configuration template when creating the VSX gateway, or if you selected the

Override Creation Template option, it is necessary to manually define the network interfaces and

connections. The Virtual System Network Configuration page for Custom Configuration appears as

shown: