One IP address from Network on Cluster and NAT

IldarSultanov — Wed, 18 May 2022 06:53:15 GMT

Hello.

We have Cluster with CheckPoint 12600(R77.30). Cluster in Hight Availabilitity mode. And we need to connect to network with subnet 10.1.1.116/30. So, one address 117 configureied to Checkpoint Cluster, other 118 to Gateway to remote network. So I was read this article https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solutionid=sk32073&partition=Advanced&product=ClusterXL%22

And then I configuried on my nodes interfaces from Network 192.168.0.116/30 and on topology configuried Cluster Interface 10.1.1.117. Then I configuried static routes like this:

10.1.1.116 masklen 30 gateway bond0.997 scopelocal;

172.16.0.1 masklen 32 gateway 10.1.1.118;

I created manual rule for internal network like this:

src: localnet dst: 172.16.0.1 - translate src: 10.1.1.116

src: localnet dst: 10.1.1.116 - translate src: 10.1.1.116

But it is not working - icmp did not answer to this hosts. In logs I can see accepted messgages and in xltsrc i can see NATed address.

How Can I find where is problem?

Re: One IP address from Network on Cluster and NAT

G_W_Albrecht — Wed, 18 May 2022 11:48:52 GMT

R77.30 is out of support since September 2019, and the 12600 has only one more month of Support left - so i wonder what you are trying to achieve here as HW/SW is very out of time...

topic One IP address from Network on Cluster and NAT in Firewall and Security Management

One IP address from Network on Cluster and NAT

Re: One IP address from Network on Cluster and NAT