topic Re: NAT not working even after manual proxy arp enabled on R 77.30 in General Topics

NAT not working even after manual proxy arp enabled on R 77.30

ganeshan_dharm1 — Tue, 05 Dec 2017 00:42:00 GMT

enabled hide nat . source is a group object ( 5 sub networks are members). when I capture the traffic on perimeter router I don't see the response. I get "incomplete" for the sh IP arp command on perimeter router.

Manual proxy enabled . still the same issue

Re: NAT not working even after manual proxy arp enabled on R 77.30

Timothy_Hall — Tue, 05 Dec 2017 03:10:41 GMT

If the hiding address does not show up in the output of command fw ctl arp you did not add the manual proxy ARP correctly; see sk30197. If it does show up in the output of fw ctl arp make sure clustering is disabled under cpconfig (assuming of course it is just a single firewall and not part of a cluster). If the firewall is part of a cluster, make sure it is in an active state with cphaprob stat.

--
My Book "Max Power: Check Point Firewall Performance Optimization"
Second Edition Coming Soon

Re: NAT not working even after manual proxy arp enabled on R 77.30

ganeshan_dharm1 — Tue, 05 Dec 2017 04:36:02 GMT

This is cluttered setup and I enabled the manual proxy arp already.and the firewall also in the active state.What could be other reasons?

Re: NAT not working even after manual proxy arp enabled on R 77.30

Marco_Valenti — Tue, 05 Dec 2017 08:00:56 GMT

be sure that in global properties under nat section merge with local proxy arp is flagged

Re: NAT not working even after manual proxy arp enabled on R 77.30

Norbert_Bohusch — Tue, 05 Dec 2017 09:11:16 GMT

as Tim Hall wrote: make sure to check that the NAT IP you use for hide operation is shown when issueing the command "fw ctl arp"

Re: NAT not working even after manual proxy arp enabled on R 77.30

Gaurav_Pandya — Tue, 05 Dec 2017 10:16:45 GMT

Hi,

Capture data with fw monitor where you will find the NAT operation is happening or not with i,I,o,O and finally capture the data with tcpdump.

Re: NAT not working even after manual proxy arp enabled on R 77.30

Juan_Concepcion — Tue, 05 Dec 2017 18:28:53 GMT

Is the address space your using associated with the external interface of your firewall??