topic what routes are created on the gateway by the deployment of Cluster on Azure in Cloud Firewall

what routes are created on the gateway by the deployment of Cluster on Azure

flachance — Wed, 05 Feb 2020 13:20:01 GMT

I'm taking over for someone who had initiated a deployment of CheckPoint cluster on Azure and I'm curious about the routes I see on the gateways.

I added a route for vnet routing

10.0.0.0/16 10.0.2.1

but there are routes already there. I don't know if there created automatically by the deployment or if they were manually created by someone.

168.63.129.16/32 10.0.1.1

169.254.169.254/32 10.0.1.1

any ideas what those are for?

also should the default route point to 10.0.1.1?

10.0.1.0 being the frontend and 10.0.2.0 being the backend.

thanks

Re: what routes are created on the gateway by the deployment of Cluster on Azure

Tommy_Forrest — Wed, 05 Feb 2020 15:57:51 GMT

Azure will use the first IP (.1) in any given subnet for its default router.

In my experience, I've see the default route inside of Gaia get set.

Like you, I've seen the 168.x.x.x and 169.x.x.x routes get set as well. But I have no idea what they're for. I don't permit access to them in my policy and haven't seen any ill effects.

Re: what routes are created on the gateway by the deployment of Cluster on Azure

mdjmcnally — Wed, 05 Feb 2020 16:15:26 GMT

If you look at an initially deployed Cloudguard Box then check out the configured DNS Servers and you will find that there are Static Routes deployed for those DNS Server addreses.

Those will be those 168.x.x.x. and 169.x.x..x static routes