topic Re: Intervlan Routing is not working on Mgmt Interface for CheckPoint in Firewall and Security Management

Intervlan Routing is not working on Mgmt Interface for CheckPoint

subrun_jamil — Wed, 23 Nov 2022 14:32:27 GMT

Intervlan Routing is not working on Mgmt Interface for CheckPoint.

I have a New CheckPoint Firewall. On Mgmt Interface I configured L3 Sub Interfaces. In CheckPoint Mgmt Interface , need to have IP assigned , since I assigned One L3 Subnet on Mgmt Interface and created more Sub interface.

However I am not able to Ping any IP of that Subnet ( Mgmt Interface ) , from IT Network , but can Ping the Gateway from IT Network.

Also , Considering Mgmt Interface IP is 10.7.251.49 and a Server IP is 10.7.251.55 , they can Ping each other but not from IT Network. There is a OPSF between IT ( Cisco ) with CP firewall , I am redistributing the Mgmt Interface over OSPF.

CP Firewall has the route to network from where I am trying to Ping to Server IP is 10.7.251.55.

Cisco## sh run interface gigabitEthernet 3/0/48 ---- Mgmt Interface Connected

interface GigabitEthernet3/0/48
switchport trunk native vlan 2103
switchport mode trunk

Cisco##show mac address-table interface GigabitEthernet3/0/48

Mac Address Table
-------------------------------------------

Vlan Mac Address Type Ports
---- ----------- -------- -----
2103 MAC.MAC.MAC DYNAMIC Gi3/0/48

Re: Intervlan Routing is not working on Mgmt Interface for CheckPoint

_Val_ — Wed, 23 Nov 2022 14:38:54 GMT

Check routing first, and then policy on your Security GW.

Re: Intervlan Routing is not working on Mgmt Interface for CheckPoint

Chris_Atkinson — Wed, 23 Nov 2022 14:50:08 GMT

Anti-spoofing / asymmetric routing would be topics to start investigating here.

Re: Intervlan Routing is not working on Mgmt Interface for CheckPoint

subrun_jamil — Thu, 24 Nov 2022 05:48:29 GMT

@Chris_Atkinson @_Val_

Did not install the Smart Dashboard yet. Security GW is running on no policy using ( fw unloadlocal ) while I was preparing with single mgmt interface and install smart dashboard on that mgmt subnet.

Re: Intervlan Routing is not working on Mgmt Interface for CheckPoint

subrun_jamil — Thu, 24 Nov 2022 05:49:17 GMT

From GAIA Portal is there any Anti-Spoofing Option ? I do not see any unless I missed.

Re: Intervlan Routing is not working on Mgmt Interface for CheckPoint

Chris_Atkinson — Thu, 24 Nov 2022 06:28:30 GMT

It's defined based on the interface topology of the Gateway object in SmartConsole.

Re: Intervlan Routing is not working on Mgmt Interface for CheckPoint

Chris_Atkinson — Thu, 24 Nov 2022 06:30:40 GMT

Sounds like routing or possibly incorrect netmask setting perhaps?

Re: Intervlan Routing is not working on Mgmt Interface for CheckPoint

subrun_jamil — Thu, 24 Nov 2022 17:34:41 GMT

@Chris_Atkinson

Smart Console is not setup yet just configured one LAN Interface ( mgmt ) and OSPF for WAN.