Change IP Address Management on Azure in FrontEnd Network

ETEK_Internatio — Thu, 27 Dec 2018 02:56:21 GMT

I have a Check Point Firewall on Microsoft Azure. I can manage the firewall throught Public IP Address. However, I note, after firewall deployment, that the Private IP Address associated to the IP public address had a wrong subnet mask.

I Changed the subnet mask on Gaia and firewall objects and the rules were installed successfully. However, when the subnet mask is changed on Azure, I lose connection to the firewall management from Internet.

To ilustrate best this scenario, I explain it with an example:

The eth0 interface have a Private IP Address 192.168.1.1 mask 255.255.255.248

The eth0:1 subinterface have a Public IP Address 200.xxx.xxx.xxx

When I change eth0 interface to Private IP Address 192.168.1.1 mask 255.255.255.240 on the firewall and install rules, the firewall acts successfully.

When I update the subnet mask on Azure I lose connection to manage the firewall and I need to return to the before subnet mask.

In this moment the subnet mask on the firewall is 255.255.255.240 and the subnet mask on azure is 255.255.255.248, but I need configure the same subnet mask on both.

Any ideas about how to solve this?

Thaks for your help.

Re: Change IP Address Management on Azure in FrontEnd Network

PhoneBoy — Thu, 27 Dec 2018 03:39:31 GMT

I understand the subnet mask is not what you expect.

My questions are:

1. If you leave it alone, what faulty behavior do you observe, if any?

2. Where exactly are you trying to correct the subnet mask? Screenshots might be helpful.

topic Re: Change IP Address Management on Azure in FrontEnd Network in Cloud Firewall

Change IP Address Management on Azure in FrontEnd Network

Re: Change IP Address Management on Azure in FrontEnd Network