Best practice for 10Gb interfaces setup - Check Point CheckMates
Best practice for 10Gb interfaces setup
Hi,
We have to replace our current firewall cluster by a pair of 15600 in active-stanby mode (with 2 10Gb and 8 1Gb interfaces). This firewall cluster will be connected to a pair of Cisco Nexus switches with vPC (active-active).
We have different choices for the connections :
- bonding both 10Gb interfaces on each firewall, connect them to both Nexus, and make all the internal and external traffic go through this bond, using VLANs
2) bonding both 10Gb interfaces on each firewall, connect them to both Nexus, and make only internal traffic go though the bond. Then bond also 2 or more 1Gb interfaces, connect them to both Nexus, and make only external traffic go though this other bond.
- do not use bonding at all. Dedicate one 10Gb interface for external traffic, and the other for internal traffic, on each firewall. Connect each firewall only to one Nexus switch.
What is the general recommandation for this setup ?
Click here to give kudos to this post.
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
1 Reply
MVP Gold CHKP
2019-02-1112:36 PM
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would probably go with option 1 as you are connecting to the same physical switch. Other two options I would consider if I had separate internal and external switches.
Click here to give kudos to this post.
1
2
3
4
5
0.5
1.0
1.5
2.0
2.5
3.0
3.5
4.0
4.5
5.0
Post Reply
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
WiliRGasparetto |
50 |
israelfds95 |
33 |
jorgeluiznim |
14 |
Bob_Zimmerman |
10 |
Martijn |
8 |
Alex- |
6 |
Tomer_Noy |
6 |
Lesley |
5 |
emmap |
5 |
simonemantovani |
5 |
Trending Discussions
[TIP] Check Point Migration Backup: Collecting Relevant Files Before a Clean Install
[INFO] Why Can Gaia Configure LOM If LOM Is Supposed to Be Independent?
Upcoming Events
Sort by:
Tue 28 Jul 2026 @ 11:00 AM (EDT)
Under the Hood - Check Point and Illumio – Modern Network Defense Against AI-Based Threats
Wed 29 Jul 2026 @ 12:00 PM (SGT)
The AI Security Report 2026: A Turning Point for Enterprise Defense - SGT
Wed 29 Jul 2026 @ 02:00 PM (IDT)
The AI Security Report 2026: A Turning Point for Enterprise Defense - AMER
Wed 29 Jul 2026 @ 03:00 PM (CEST)
The AI Security Report 2026: A Turning Point for Enterprise Defense EMEA
Wed 29 Jul 2026 @ 11:00 AM (EDT)
TechTalk: On-Premise SD-WAN Management
Thu 30 Jul 2026 @ 11:30 AM (CDT)
CheckMates Live DFW: Agentic AI Security Deep Dive & Hands-On
Tue 28 Jul 2026 @ 11:00 AM (EDT)
Wed 29 Jul 2026 @ 12:00 PM (SGT)
Wed 29 Jul 2026 @ 02:00 PM (IDT)
Wed 29 Jul 2026 @ 03:00 PM (CEST)
Wed 29 Jul 2026 @ 11:00 AM (EDT)
TechTalk: On-Premise SD-WAN Management
Thu 30 Jul 2026 @ 10:00 AM (PDT)
AI Security Masters E12: READY OR NOT: Securing the AI Enterprise 4/5 - AI Gateway
Tue 11 Aug 2026 @ 11:30 AM (EDT)
New York City: Agentic AI Security Deep Dive & Hands-On
Thu 13 Aug 2026 @ 11:30 AM (EDT)
Waltham, MA: Agentic AI Security Deep Dive & Hands-On
Thu 20 Aug 2026 @ 08:30 AM (COT)
Medellin: Workspace Evolution: Hybrid Mesh Management - Visibilidad, Automatización e IA
Thu 20 Aug 2026 @ 06:00 PM (COT)
Medellin: Workspace Intelligence: IA Generativa en Acción para Equipos de Seguridad
Thu 27 Aug 2026 @ 09:00 AM (CEST)
Check Point Hands-On SASE and Cloud Workshop - Zurich
Wed 21 Oct 2026 @ 09:00 AM (BST)
AI Security Workshop - Glasgow
About CheckMates
Learn Check Point
Advanced Learning
Resources
Non-English Discussions
YOU DESERVE THE BEST SECURITY
We’re Social. Follow Us CheckMates on LinkedIn Check Point on YouTube CheckMates on Facebook CheckMates on Instagram
©1994-2026 Check Point Software Technologies Ltd. All rights reserved. Copyright Privacy Policy About Us UserCenter
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.