Traffic Flow on Elastic XL

[nabil_l]

Dear Experts

I am little bit confuse on Packet flow in Elastic XL. Elastic XL with 2 Gateway. GW-1(SMO)

SMO(GW-1) receive traffic from PC-1(Connected to GW-1 PORT-1-) Destined for PC-2(Connected to GW-1 PORT-2). Suppose this traffic is handled by GW-2. Now when GW-1 send the frame to GW-2 only destination MAC is changed from GW-1-PORT-1 MAC to GW-2-PORT-1 MAC or also Source MAC?

When SMO Receive Packet.

S MAC = PC-1

D MAC = GW-1 PORT-1

S IP = PC-1

D IP = PC-2

Traffic passed to GW-2. (My question)

S MAC = PC-1 or GW-1-PORT-1 -- Which one?

D MAC = GW-2 PORT-1

Traffic reached to GW-2, traffic is processed and now PC-2 send packet to PC-1

S MAC = PC-2

D MAC = GW-1 PORT 2

Reply packet reached to GW-1, now what happen? As per my understanding again GW-1 send that packet to GW-2 because it was initially processed by GW-2. Which information is checked by GW-1 to send return packet to gateway to or GW-1 just process that packet?

Can any one give proper information on this?

Thank you

[Alex-]

https://community.checkpoint.com/t5/Firewall-and-Security-Management/ElasticXL-Traffic-Distribution-...

[nabil_l]

I got my answer that SMO only change Destination MAC address to GW-2 Port 1. Now packet reached to GW-2

GW-2

S MAC = PC-1

D MAC = GW-2 PORT -1 (Same Network/Port-1 in GW-1)

S IP = PC-1

D IP = PC-2

Now when Gateway-2 Process the packet, how it will forward packet directly to PC-2. Do GW-2 also have same ARP entry like GW-1, ARP Table are synced?