> Source: [sk89980](https://support.checkpoint.com/results/sk/sk89980)

# sk89980 - Support for Sub-interfaces / Alias IP address / Secondary IP address in Check Point products

| Property | Value |
|----------|-------|
| Solution ID | sk89980 |
| Date Created | 2012-12-11 |
| Last Modified | 2021-11-07 |
| Technical Level | General |
| OS | Linux, Gaia |

## Solution

**Official statement:**

* Gaia OS supports the configuration of secondary IP addresses only on single Security Gateways that are not part of a cluster.

<!-- -->

* The use of secondary IP addresses is not supported in ClusterXL or VRRP Cluster on Gaia OS.

In all other releases/configurations (e.g., Dynamic Routing), the use of secondary IP addresses is *not* officially supported.

If the physical server does not have enough physical interfaces, then configure VLAN interfaces.

**Related solutions:**

* [sk31821 - Traffic that is sent to Secondary IP addresses / Alias IP addresses that were defined on interfaces of ClusterXL members is not processed](http://supportcontent.checkpoint.com/solutions?id=sk31821)
* [sk43451 - Are sub-interfaces supported in IPSO VRRP cluster?](http://supportcontent.checkpoint.com/solutions?id=sk43451)

*** ** * ** ***

Number of supported interfaces / subnets / VLANs (refer to *Release Notes* for the given version):

* **Using ClusterXL and VRRP Cluster**   

  * Check Point supports 1 subnet per physical interface
  * Check Point supports 1 subnet per VLAN
  * Check Point supports up to 256 VLANs per physical interface
  * Check Point supports up to 1024 VLAN per Security Gateway

  <br />

  <br />

* **Using a single Security Gateway on SecurePlatform / Gaia OS**   

  * Check Point supports no practical limit of subnets per physical interface (but more than 1 is not recommended)
  * Check Point supports no practical limit of subnets per VLAN (but more than 1 is not recommended)
  * Check Point supports up to 256 VLAN's per physical interface
  * Check Point supports up to 1024 VLAN's per Security Gateway

  <br />

  <br />

* **Using a single Security Gateway on IPSO OS**   

  * IPSO supports up to 8 subnets per physical interface (but more than 1 is not supported)
  * IPSO supports up to 8 subnets per VLAN (but more than 1 is not supported)
  * Check Point supports up to 256 VLAN's per physical interface
  * Check Point supports up to 1024 VLANs per Security Gateway

---

# Agent Instructions

This content is from the Check Point Support Center (https://support.checkpoint.com), the official knowledge base for Check Point cybersecurity products.

## Navigating This Knowledge Base

- **Complete index**: [llms.txt](https://support.checkpoint.com/llms.txt)
- **All SK articles**: [SecureKnowledge Sitemap](https://support.checkpoint.com/sitemaps/secureknowledge-sitemap-index.xml)
- **SK article URL pattern**: `https://support.checkpoint.com/results/sk/{skId}`
- **Markdown responses**: AI bot User-Agents automatically receive `text/markdown` content