topic Re: ACCESS Points on firewall in Spark Firewall (SMB)

ACCESS Points on firewall

lcako — Tue, 15 Apr 2025 08:52:43 GMT

Hello,

i have a check point firewall SG2000.

The tipology of my network is : ISP- MIKROTIK-FIREWALL - SWITCH POE - Access point

i have 13 access points but only two get internet from firewall , 11 not . When i connect switch poe directly into mikrotik (disconnect firewall) , i have internet on all 13 access points. When i connect firewall with switch POE and access points, i dont have internet on 11 of them. Only 2 access points get internet. What should be the problem that 2 AP get internet and 11 not.

On mikrotik if i remove firewall . ISP-mikrotik-switch poe -AP , all APS get internet

Re: ACCESS Points on firewall

Don_Paterson — Tue, 15 Apr 2025 09:20:35 GMT

You have not shared detailed information to support a full assessment for solution advice.

What do you see in the Check Point firewall logs?

Troubleshooting Steps:

1. Check Firewall Logs: Review the firewall logs to see if there are any blocked connections or errors related to the access points.

2. Review Firewall Rules: Go through the firewall rules and ensure that there are no rules blocking traffic to the access points.

3. Verify NAT Settings: Ensure that NAT is properly configured to allow traffic from all access points.

4. Check DHCP Settings: If the firewall is providing DHCP, make sure it is configured to assign IP addresses to all access points.

5. Test Connectivity: Use tools like ping or traceroute from the firewall to the access points to check for connectivity issues.

6. Check VLANs: Verify that there are no VLAN misconfigurations that could be affecting the access points

Re: ACCESS Points on firewall

lcako — Tue, 15 Apr 2025 09:41:27 GMT

I uploaded nat rule, policy , and logs.

The Logs are from an ip of AP that doesnt take internet.

Re: ACCESS Points on firewall

PhoneBoy — Tue, 15 Apr 2025 12:30:02 GMT

What troubleshooting have you done on the APs themselves?
Do they get an IP from DHCP, for instance?
If not, can you confirm with a tcpdump or similar that any traffic is being sent from those APs at all?

Re: ACCESS Points on firewall

the_rock — Tue, 15 Apr 2025 17:33:17 GMT

Maybe try quick zdebug from expert mode of the fw and see what gives.

example:

say AP ip is 10.10.10.10

command -> fw ctl zdebug + drop | grep 10.10.10.10

Andy