topic Re: add static route to 1450 in Spark Firewall (SMB)

add static route to 1450

nflnetwork29 — Wed, 08 Jul 2020 13:32:29 GMT

hello im trying to add a static route to my checkpoint but the route is showing inactive . i dont see anywhere to enable it . what am i missing ?

Re: add static route to 1450

G_W_Albrecht — Thu, 09 Jul 2020 09:37:49 GMT

Try it using CLI, see Check Point 700/900/1400 Appliance Technical Reference Guide R77.20.87 p.432ff for details!

Re: add static route to 1450

PhoneBoy — Sat, 18 Jul 2020 23:39:59 GMT

If the next hop is not on a directly connected network it won’t necessarily be active.

Re: add static route to 1450

chrominek — Tue, 11 May 2021 15:54:46 GMT

I have something similar on 1570 dual internet (WAN primary cell0 secondary). After a few firmware updates (requested by CP support), all the traffic goes over LTE, and on WAN only ping probes (successful). WAN is primary active, any routing over wan (GUI/clish) ends with the inactive state. Default gateway over WAN is not visible on gui/clish, only over LTE (cell0). WAN is not answering ping requests. The only traffic is the ping probe by system (answered) and the probe state is green for all servers.

But "route add target_ip gw gw_ip" from linux - works. Route appears in gui as a system route and appliance works perfect (until interface down/restart).

Any idea how to force WAN to work, without forcing it at system level? By the way, where is the best place to place ifup-WAN command?

I guess about /31 netmask on WAN, but it is now common ...

Re: add static route to 1450

G_W_Albrecht — Wed, 12 May 2021 07:45:33 GMT

I would involve TAC here...