I have got a support call the last week about inability to re-configure IP address on one of the Virtual Systems' VLAN interface on VSX R67.10 system.
To be more specific, say it was eth1.444 with IP address 192.168.xxx.yyy. During the migration to this VS, customer had to "hide" interface for some time. So he has changed its IP address to something like 22.214.171.124.
First time it has worked like a charm. But when he wanted to put the production IP address back, strange things began to happen. In the SmartDashboard it was all right, but instead of 192.168.xxx.yyy eth1.444 was still reported with 126.96.36.199 by ifconfig and cphaprob -a if commands.
Deletion and recreation fo the interface did not change the situation. Eventually the customer has opened a support call with us.
Apparently this is an known issue described in Check Point SecureKnowledge in sk67120.
The solution was to install policy on the VS after re-definition of the interface.
The issue is only specific to R67 and does not seem to appear with R65 and R75.40VS.