Create a Post
Showing results for 
Search instead for 
Did you mean: 

L2 Trunks to different switch environments - router?

Hi All,

Got an interesting one here. The requirement is the following -

HP switches connected to the firewall via a trunk with the L3 interfaces of the "production" VLAN's on the firewall. So devices on the HP switches on the specific VLAN's will use the firewall as the default gateway and various rules applied before traffic being allowed / disallowed to other L3 interfaces.


Production VLAN's -

VLAN10 -

VLAN20 -

Trunk99 connected to checkpoint from HP switch with VLAN10,20.

Layer 3 interface on Checkpoint for the production VLAN's of .1 for each VLAN.

Enterprise VLAN's -

VLAN30 -

VLAN40 -

Trunk 1 connected to checkpoint from HP switch with VLAN30,40

Layer interface on HP switch for the production VLAN's of .1 for each VLAN.

With appropriate routing and firewall rules the traffic flows between the two environments.

NOW... I want to add a completely new switch environment, which is separate from the HP. So let's say it's Cisco. Can I add another trunk to the checkpoint firewall connected to a Cisco switch with VLAN10,20 using the same ranges - effectively using the firewall as the router if you like? 

0 Kudos
1 Reply

You could do this when you set the Check Point up with a bridge for VLAN 10 and VLAN 20.
There is no way to setup another layer 3 interface on the Check Point in the same VLAN.
Regards, Maarten