topic Re: Check Point SMB 1575 Block Traffic as gateway in layer 2 in Spark Firewall (SMB)

Check Point SMB 1575 Block Traffic as gateway in layer 2

jmedinad — Sat, 10 May 2025 17:12:54 GMT

Hi Evereyone

I have a problem with a 1575 firewall that is blocking traffic at layer 2, the firewall with IP 192.168.10.1 is the gateway for the 192.168.10.0/24 network, there is an MPLS that connects three remote sites. The router has IP 192.168.10.254. From the remote sites they do not have access to the servers on the 192.168.10.0 network, but they can ping the MPLS router and the firewall on their LAN. The firewall has static routes to the remote sites.

In the tracert from remote site the traffic stay in router IP, but when the firewall is out from the network, the connectivity works

Thanks All

Re: Check Point SMB 1575 Block Traffic as gateway in layer 2

PhoneBoy — Mon, 12 May 2025 17:11:00 GMT

What exact steps did you take to configure Layer 2 on the 1575?
Do you see anything on the logs of the 1575 or even verify with a tcpdump that traffic even reaches the 1575?
What is the MPLS router’s default route here?
There is no IP on the “Internet” side of the gateway, so it’s not clear how traffic is even routed through the 1575.

Re: Check Point SMB 1575 Block Traffic as gateway in layer 2

jmedinad — Mon, 12 May 2025 17:34:14 GMT

Hi,

I set lan network with ip 192.168.10.1, and put the static route to remote site.
I can`t see layer 2 traffic in the firewall
the default route from MPLS Router's are the 1575 (192.168.10.1)
the FW hace a public ip, the traffic come from router in the remote site to MPLS Router and send to 1575 the lan (192.168.10.0)

Re: Check Point SMB 1575 Block Traffic as gateway in layer 2

PhoneBoy — Mon, 12 May 2025 22:09:55 GMT

"I can`t see layer 2 traffic in the firewall" by what precise methods did you attempt to verify this?
It's also not clear this is a Layer 2 configuration as that requires configuring a bridge with two or more ports.

The more information you can provide about the configuration with screenshots, if possible (redact sensitive details as necessary), the more likely we can help you.