topic Re: Can we creat PBR on 1430 in Spark Firewall (SMB)

Can we creat PBR on 1430

Nikhil_Patil — Tue, 24 Jul 2018 09:19:30 GMT

Gaia r77.20 installed on 1430 appliance. There are 2 ISP link terminated on Checkpoint 1430 appliance with link fail-over configured. If ISP1 failed all traffic should pass through ISP2 except 192.168.10.20/24 (source IP) 172.16.0.50(destination IP) UDP 8594(service) traffic.

Please suggest how to configure PBR

Re: Can we creat PBR on 1430

Pedro_Espindola — Tue, 24 Jul 2018 13:59:07 GMT

Hello Nikhil,

Do you want this connection to only use ISP1 even if it fails?

Could you be clearer about where those IP addresses are in your topology?

Re: Can we creat PBR on 1430

Maarten_Sjouw — Tue, 24 Jul 2018 21:18:02 GMT

Goto the static routes page of the device and add the route with all the parameters you need. That's all.

Re: Can we creat PBR on 1430

Nikhil_Patil — Thu, 26 Jul 2018 12:34:53 GMT

i went to "Routing" option click on "New" and below was the screen but there is no option as like PBR configuration. i have check product and admin guide. They mentioned PBR is supported but i could not locate PBR option

https://sc1.checkpoint.com/documents/R77.20.75/R77.20.75_600_700_AdminGuide/html_frameset.htm

Even if i configured specific service/source IP base route for ISP1, if ISP1 goes down all network traffic passed through ISP2(default route) and all ISP1 route inactive.

Re: Can we creat PBR on 1430

Pedro_Espindola — Thu, 26 Jul 2018 17:46:44 GMT

There is no separate page for configuring PBRs in SMB. You do it the same way as with other static routes. The only difference is that you change the Source field from "Any" to the desired source.

When using PBRs in both SMB appliances and in enterprise appliances the route will go down if the selected ISP goes down.