Support Center > Search Results > SecureKnowledge Details
"Bridge uses two different VLAN tags for interfaces. This configuration cannot be used with Active-Active bridge mode" error when creating a Virtual System in Bridge mode
Symptoms
  • "Bridge uses two different VLAN tags for interfaces. This configuration cannot be used with Active-Active bridge mode" error when creating a Virtual System in Bridge mode between interfaces with different VLAN tags:

    1. Right-click on the VSX cluster object
    2. Go to "Check Point" menu - go "VSX" menu - click on "Virtual System..."
    3. Enter the name - check the box "Bridge Mode" - check the box "Override Creation Template" - click on "Next" button
    4. Click on "Add..." button - select an interface - enter a VLAN tag (e.g., 200) - click on OK
    5. Click on "Add..." button - select the same interface - enter different VLAN tag (e.g., 300) - click on OK
    6. Click on "Next" button
    7. Click on "Finish" button
    8. Operation fails with the following error in SmartDashboard:

      Checking connection with VSX
      Bridge uses two different VLAN tags for interfaces. This configuration cannot be used with Active-Active bridge mode
      
      ---------------
      Virtual System Processing Completed with Errors
      
      Pushing network configuration to Virtual System (bridge mode) operation has finished with errors.
               Refer to the messages retrieved during the VSX push configuration stage
               and make sure that the configuration you are trying to push is legal.
               If the problem persists contact Check Point Technical Support.
      
      Operation has failed.
      --------
      
Cause

By design, in VSX Cluster configured in Active-Active bridge mode, it is not allowed to create a Virtual System in Bridge mode between interfaces with different VLAN tags
(Example topology: eth2.200 --- [VS in Bridge mode] --- eth2.300).


Solution
Note: To view this solution you need to Sign In .