> Source: [sk173928](https://support.checkpoint.com/results/sk/sk173928)

# sk173928 - Bonded Interfaces are in DOWN status after a reboot

| Property | Value |
|----------|-------|
| Solution ID | sk173928 |
| Date Created | 2021-06-23 |
| Last Modified | 2022-05-16 |
| Technical Level | General |
| Products | Security Gateway |
| Versions | R81.10 (EOS), R81 (EOS) |
| OS | Gaia |

## Symptoms

- * `'cphaprob -a if'` shows bonded status as DOWN.

* `'cphaprob show_bond'` provides similar output to the following:  
  `
  Slave name | Status | Link`  
  `
  ----------------+-----------------+-------`  
  `
  eth1-01 | Not Available | No`  
  `
  eth1-02 | Not Available | No`

* Policy installation solves the issue.

* executing `"mq_mng ----reconf"` resolve the issue.

* i40 drivers shows the following messages during the boot sequence:  
  ``
  kernel: i40e: Unknown parameter `RSS'``  
  ``
  kernel: i40e module will load but *WILL NOT* function as expected.``  
  ``
  kernel: i40e: Intel(R) 40-10 Gigabit Ethernet Connection Network Driver - version 2.10.19.82``  
  ``
  kernel: i40e: Copyright(c) 2013 - 2019 Intel Corporation.``

* Pulling cable and reinserting resolves the issue (This solves the issue in R81.10 if Policy Installation or "mq_mng --reconf" does not help)

## Cause

The Security Gateway uses fwstarts to initiate the modules loading sequence. A change was made to shorten the OS boot loading time, due to this, the multi-queue configuration does not have enough time to load before the next sequence starts, which causes the interfaces to not load properly.

## Solution

[Contact Check Point Support](https://www.checkpoint.com/support-services/contact-support/) to get a Hotfix for this issue.   
A Support Engineer will make sure the Hotfix is compatible with your environment before providing the Hotfix.

For faster resolution and verification please collect [CPinfo](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk92739) files from the Security Management and Security Gateways involved in the case.

**Hotfix installation instructions:**

Refer to [sk168597 - How to install a Hotfix](https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk168597).

As a **workaround,** move the following section to the bottom of *fwstart* script to allow more time for the multi-queue configuration to be loaded.

*fwstart* is located at: *$FWDIR/bin/fwstart*

Action plan:

1. Backup the *fwstart* script:  
   * **`cp $FWDIR/bin/fwstart $FWDIR/bin/fwstart_backup`**
2. Edit the script in VI:
   * **`vi $FWDIR/bin/fwstart`**
3. look for the section:
   *

     |----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
     | `rm /tmp/mq_reconf_lock >& /dev/null` `if ("$linuxver" != "2.6") then` `$FWDIR/bin/mq_mng_reconf_all_vs >& /dev/null` `endif` `***` `In some versions, instead of:` ` $FWDIR/bin/`**mq_mng_reconf_all_vs**` >& /dev/null,` `There will be: ` `$FWDIR/bin/`**mq_mng --reconf**` >& /dev/null` `***` |

4. Move this section above the line:

   `fw ctl fast_accel init >& /dev/null`

**Example:**

* Before the change:

  |---------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
  | endif # Kernel 3.10 - apply MQ settings for all VS ##release lock of mq_mng rm /tmp/mq_reconf_lock \>\& /dev/null **if ("$linuxver" != "2.6") then** **$FWDIR/bin/mq_mng_reconf_all_vs \>\& /dev/null** **endif** if ((! $?VS_CTX) \&\& ($linux == 1)) then # Apply Backplane Ethernet affinity settings if ( -e /dev/adp0) then /etc/ppk.boot/bin/sam_mq.sh endif endif if ("$linuxver" == "3.10") then if ($fw1_vsx == 0) then dynamic_split -o startup endif endif fw ctl fast_accel init \>\& /dev/null fw6 ctl fast_accel init \>\& /dev/null #Temporary WA for upgrading Open Servers to R80.40 - #Set affinity again, in case it was overwritten $FWDIR/scripts/fwaffinity_apply -q \>\& /dev/null exit $err |

* After the change:

  |----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------|
  | endif <br /> if ((! $?VS_CTX) \&\& ($linux == 1)) then # Apply Backplane Ethernet affinity settings if ( -e /dev/adp0) then /etc/ppk.boot/bin/sam_mq.sh endif endif if ("$linuxver" == "3.10") then if ($fw1_vsx == 0) then dynamic_split -o startup endif endif # Kernel 3.10 - apply MQ settings for all VS ##release lock of mq_mng rm /tmp/mq_reconf_lock \>\& /dev/null **if ("$linuxver" != "2.6") then** **$FWDIR/bin/mq_mng_reconf_all_vs \>\& /dev/null** **endif** fw ctl fast_accel init \>\& /dev/null fw6 ctl fast_accel init \>\& /dev/null #Temporary WA for upgrading Open Servers to R80.40 - #Set affinity again, in case it was overwritten $FWDIR/scripts/fwaffinity_apply -q \>\& /dev/null exit $err |

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content