topic Checkpoit WAN DHCP in Firewall and Security Management

Checkpoit WAN DHCP

UxMal — Thu, 19 Oct 2023 20:25:36 GMT

Hi,

I am new to CP, but because we use it at work I must learn some of it.

I downloaded 14day trail version to test it as VM on ESXi.

I have management and security GW.

At home I use pfSense so I just turn of pfSense VM, assign VM NICs from pfsense to CP VM, but I dont know how to configure WAN network.

LAN is working fine, but WAN connection (isp is useing DHCP) is not working.

CP does not get IP from ISPs DHCP server.

I dont know if this is VM problem or maybe because I use trail license?

Thanks

PhoneBoy — Mon, 23 Oct 2023 19:30:41 GMT

Have you verified the DHCP packets are reaching the Check Point VM?
This should be done with tcpdump.

the_rock — Mon, 23 Oct 2023 19:54:52 GMT

DHCP would work regardless, so Im positive ts not license issue. As Phoneboy said, please confirm packets even get to CP itself.

Say src ip is 1.1.1.1 and dst is 2.2.2.2

You can try something like below:

tcpdump -enni any host 1.1.1.1

tcpdump -enni any host 2.2.2.2

fw monitor -F "1.1.1.1,0,2.2.2.2,67,0" -F "2.2.2.2,0,1.1.1.1,67,0"

You follow srcip,srcport,dstip,dstport,protocol

You can also use below site my colleague has made over the years to help people with different captures, hope it helps

Kind regards,

Andy