ACCESS Points on firewall

[lcako]

Hello,

i have a check point firewall SG2000.

The tipology of my network is : ISP- MIKROTIK-FIREWALL - SWITCH POE - Access point 

i have 13 access points but only two get internet from firewall , 11 not . When i connect switch poe directly into mikrotik (disconnect firewall) , i have internet on all 13 access points. When i connect firewall with switch POE and access points, i dont have internet on 11 of them. Only 2 access points get internet. What should be the problem that 2 AP get internet and 11 not.

On mikrotik if i remove firewall . ISP-mikrotik-switch poe -AP , all APS get internet 

[Don_Paterson]

You have not shared detailed information to support a full assessment for solution advice. 

What do you see in the Check Point firewall logs?

Troubleshooting Steps:

1. Check Firewall Logs: Review the firewall logs to see if there are any blocked connections or errors related to the access points.

2. Review Firewall Rules: Go through the firewall rules and ensure that there are no rules blocking traffic to the access points.

3. Verify NAT Settings: Ensure that NAT is properly configured to allow traffic from all access points.

4. Check DHCP Settings: If the firewall is providing DHCP, make sure it is configured to assign IP addresses to all access points.

5. Test Connectivity: Use tools like ping or traceroute from the firewall to the access points to check for connectivity issues.

6. Check VLANs: Verify that there are no VLAN misconfigurations that could be affecting the access points

[lcako]

 

 

 

I uploaded nat rule, policy , and logs. 

The Logs are from an ip of AP that doesnt take internet.

[the_rock]

Maybe try quick zdebug from expert mode of the fw and see what gives.

example:

say AP ip is 10.10.10.10

command -> fw ctl zdebug + drop | grep 10.10.10.10

Andy

[PhoneBoy]

What troubleshooting have you done on the APs themselves?
Do they get an IP from DHCP, for instance?
If not, can you confirm with a tcpdump or similar that any traffic is being sent from those APs at all?