Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Gaetano_Nicosia
Participant
Jump to solution

Rule for traffic between two vlan

Good Morning

I have this "scenario" on my Firewall 730.

On LAN1 Ihave created the VLAN 5, 10, 20

On DMZ  I have created the VLAN 30, 40,50

Now, for example, I need to create a policy so that only the VLAN 10 can reach VLAN 30 and vice versa.

Since I'm new ino CP, can someone explain to me how to create this policy?

Thanks and best regards

Gaetano

0 Kudos
1 Solution

Accepted Solutions
HeikoAnkenbrand
Champion Champion
Champion

1) Creat an network objekt for VLAN 10 with the IP address and network mask for example NET_VLAN10 IP192.168.10.0/24

2) Creat the same for VLAN 30 for example NET_VLAN30 IP19.168.30.0/24

3) Now create a policy with both network objekts in source and destination.

4) Install policy:-)

 

➜ CCSM Elite, CCME, CCTE

View solution in original post

5 Replies
HeikoAnkenbrand
Champion Champion
Champion

1) Creat an network objekt for VLAN 10 with the IP address and network mask for example NET_VLAN10 IP192.168.10.0/24

2) Creat the same for VLAN 30 for example NET_VLAN30 IP19.168.30.0/24

3) Now create a policy with both network objekts in source and destination.

4) Install policy:-)

 

➜ CCSM Elite, CCME, CCTE
HeikoAnkenbrand
Champion Champion
Champion

I recommend you the following articles:

Check Point for beginners

➜ CCSM Elite, CCME, CCTE
0 Kudos
Gaetano_Nicosia
Participant

Thank You for reply.

just a little clarification: what do you mean by "install policy"?

0 Kudos
Wolfgang
Authority
Authority

If you run your Check Point 730 appliance in central management mode you have to do a "policy install" to push the firewall-policy to your appliance.

But I think you are running your appliance standalone and you are using the Web-UI to manage the firewall-policy. With these configuration you don't need a "policy-install". Clicking the "apply"-button is enough.

Wolfgang

 

G_W_Albrecht
Legend
Legend

No one can run a 730 in central management mode - so this is surely the wrong corner to post the question, it should rather belong to SMB Appliances and SMP

 

CCSE CCTE CCSM SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events