IBM QRadar

 View Only

 Create Vlans under bonded interface

Yousef Nasri's profile image
Yousef Nasri posted Wed January 14, 2026 10:44 AM

We have qradar 7.5


i have 2 10g ports and i need to bond both of them then create subinterface like bond1.10 bond1.20 and bond1.30 

vlan 10 mgmt

vlan 20 data

vlan 30 ha 

can we do that ?

Dusan VIDOVIC's profile image
Dusan VIDOVIC

Having a separate bond for production and for crossover/DRBD communication should be doable (might need to make it from CLI); i.e. bond0 for management interface and bond1 for crossover. However, I would generally avoid using the same bond for both purposes. 

However, using static routes to separate management interface from data collection interface (which I am assuming would happen here) is discouraged - see QRadar: Static route configuration  .
It might be allowed (i.e. not impeding your break & fix support) if IBM's services do a bespoke configuration. On your end, you would need to be very careful to properly document and backup this configuration to be able to revert to it after patching etc. 

Rory Bray's profile image
Rory Bray

We don't support creation of vlans on any interfaces, including bonds.  You obviously can make it work within Linux but there's a very high chance that we will break it all on an upgrade or patch.