- Products
- Learn
- Local User Groups
- Partners
- More
Welcome to Maestro Masters!
Talk to Masters, Engage with Masters, Be a Maestro Master!
Join our TechTalk: Malware 2021 to Present Day
Building a Preventative Cyber Program
Be a CloudMate!
Check out our cloud security exclusive space!
Check Point's Cyber Park is Now Open
Let the Games Begin!
As YOU DESERVE THE BEST SECURITY
Upgrade to our latest GA Jumbo
CheckFlix!
All Videos In One Space
I worked at a large Check Point Customer where we would set up a NAT Subnet by routing the subnet from the router to the firewall's vip. I would like to use this technique as we are running out of addresses on the interface in question. What else do I need to do to make this work?
Cheers
All you need to do is make sure the subnet is routed to the gateway, then you have the complete subnet at your proposal including network and broadcast address. On the Check Point just use the addresses, nothing else is needed, no proxy arp or anything else.
All you need to do is make sure the subnet is routed to the gateway, then you have the complete subnet at your proposal including network and broadcast address. On the Check Point just use the addresses, nothing else is needed, no proxy arp or anything else.
There are several reasons that I prefer this approach, least of which is removing the dependency on proxy-arp.
I find it more flexible in terms of routing and your ISP link addressing etc.
About CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY