https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148660#M23778 <P>I would suggest to contact TAC !</P> Mon, 16 May 2022 07:06:02 GMT G_W_Albrecht 2022-05-16T07:06:02Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148603#M23769 <P>Dear All,</P><P>After we &nbsp;add a new trunk between Checkpoint Firewall and a Cisco L2 switch.</P><P>We found Check Point could not learn this VLAN Device MAC at ARP. &nbsp;The Check Point OS version is GAIA R80.40.</P><P>How we resolve this problem.</P><P>Thanks for a lot.</P> Fri, 13 May 2022 23:30:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148603#M23769 Giga_Yang 2022-05-13T23:30:20Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148607#M23770 <P>Can you please share more detail of the environment - Is the gateway (appliance model?) configured as a standard cluster or for VSX and what JHF is applied?</P> <P>How is the trunk port configured on the Cisco, is it also a bond?</P> Sat, 14 May 2022 03:42:41 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148607#M23770 Chris_Atkinson 2022-05-14T03:42:41Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148628#M23771 <P>Hi Chris,</P><P>1. No VSX, only HA.</P><P>2. The gateway is 16200.</P><P>3. The GAiA OS is R80.40 with JFH Take 118.</P><P>4. The trunk is use interface bond.</P> Sat, 14 May 2022 20:37:57 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148628#M23771 Giga_Yang 2022-05-14T20:37:57Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148629#M23772 <P>LACP is used for the bond on both sides and cabling has been verified?</P> <P>Please share the output of:</P> <P>[Expert@HostName:0]# cat /proc/net/bonding/bondX</P> <P>&nbsp;</P> <P>Note: Updating to a recent JHF is also recommended where possible.</P> Sun, 15 May 2022 01:48:12 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148629#M23772 Chris_Atkinson 2022-05-15T01:48:12Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148630#M23773 <P>Hi Sir,</P><P>Others VLAN trunk was normally, but when we create a new. We see this problem.</P><P>I will try to output&nbsp;<SPAN>cat /proc/net/bonding/bondX for you.</SPAN></P> Sun, 15 May 2022 03:18:48 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148630#M23773 Giga_Yang 2022-05-15T03:18:48Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148631#M23774 <P>But we can see gateway interface Mac on local device. Why we can not see &nbsp;local device's Mac on gateway.</P><P>&nbsp;</P> Sun, 15 May 2022 03:34:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148631#M23774 Giga_Yang 2022-05-15T03:34:15Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148632#M23775 <P>Are you on the active or standby gateway and w<SPAN>hat do you see in the ARP table if you do a broadcast ping or similar?</SPAN></P> Sun, 15 May 2022 05:04:52 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148632#M23775 Chris_Atkinson 2022-05-15T05:04:52Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148637#M23776 <P>Hi Chris,</P><P>We can ping local device from firewall. But not see Mac at ARP.</P><P>But other VLAN trunk is normally,</P> Sun, 15 May 2022 07:09:53 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148637#M23776 Giga_Yang 2022-05-15T07:09:53Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148639#M23777 <P>Hi Chris,</P><P>Should we turn off/on the VLAN interface on gateway? If it will not &nbsp;influence other VLAN traffic.</P> Sun, 15 May 2022 07:14:14 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148639#M23777 Giga_Yang 2022-05-15T07:14:14Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148660#M23778 <P>I would suggest to contact TAC !</P> Mon, 16 May 2022 07:06:02 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Checkpoint-MAC-learning-problem/m-p/148660#M23778 G_W_Albrecht 2022-05-16T07:06:02Z