https://community.checkpoint.com/t5/Firewall-and-Security-Management/Created-new-network-showing-unreachable/m-p/99917#M8693 <P>Hi,</P><P>&nbsp;</P><P>On existing Checkpoint Virtual system with BGP Connection towards Cisco NSX&nbsp; we have created new logical interfaces for new customer's towards Cisco NSX.&nbsp;</P><P>eBGP is running between checkpoint VS and Cisco NSX i am able to learn the network advertised by NSX and i am seeing the routes in checkpoint VS routing table, Same route has beed advertised to Cisco ACI which backbone but i am able to receive the traffic from NSX from new network and traffic passed checkpoint to ACI , i am seeing return traffic from ACI to Checkpoint VS but when it received CP VS it doesnot know the destination network the network showing unreachable , but its is learned from Cisco NSX and listed in routing table as active route.</P><P>Can anyone here helpout here? Anti spoofing is not enabled on the interfaces there is no VLAN or IP overlapping.</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 23 Oct 2020 03:26:15 GMT dinesku3 2020-10-23T03:26:15Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Created-new-network-showing-unreachable/m-p/99917#M8693 <P>Hi,</P><P>&nbsp;</P><P>On existing Checkpoint Virtual system with BGP Connection towards Cisco NSX&nbsp; we have created new logical interfaces for new customer's towards Cisco NSX.&nbsp;</P><P>eBGP is running between checkpoint VS and Cisco NSX i am able to learn the network advertised by NSX and i am seeing the routes in checkpoint VS routing table, Same route has beed advertised to Cisco ACI which backbone but i am able to receive the traffic from NSX from new network and traffic passed checkpoint to ACI , i am seeing return traffic from ACI to Checkpoint VS but when it received CP VS it doesnot know the destination network the network showing unreachable , but its is learned from Cisco NSX and listed in routing table as active route.</P><P>Can anyone here helpout here? Anti spoofing is not enabled on the interfaces there is no VLAN or IP overlapping.</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 23 Oct 2020 03:26:15 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Created-new-network-showing-unreachable/m-p/99917#M8693 dinesku3 2020-10-23T03:26:15Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Created-new-network-showing-unreachable/m-p/99918#M8694 <P>What version/JHF level?<BR />Might be good to get the TAC involved.</P> Fri, 23 Oct 2020 03:58:03 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Created-new-network-showing-unreachable/m-p/99918#M8694 PhoneBoy 2020-10-23T03:58:03Z https://community.checkpoint.com/t5/Firewall-and-Security-Management/Created-new-network-showing-unreachable/m-p/99920#M8695 <P>Version R80.10</P><P>JHF Take 212</P><P>&nbsp;</P><P>Checkpoint TAC already involved , they asked capture pcap files in all the interafces shared the info waiting for their reply.</P> Fri, 23 Oct 2020 04:07:06 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Created-new-network-showing-unreachable/m-p/99920#M8695 dinesku3 2020-10-23T04:07:06Z