This website uses cookies. By clicking Accept, you consent to the use of cookies. Click Here to learn more about how we use cookies.
Accept
Reject
ABOUT CHECKMATES & FAQ
Create a Post
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
Help

Are you a member of CheckMates?

×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
HS
Contributor
‎2019-09-13 11:29 AM

Add proxy arp entries on R80.20 VSX

Hi,

we will migrate security gateway from R77.30 to R80.20 in VSX. 
We have some proxy arp entries on our gateway but in R80.20 there don't use "/opt/CPsuite-R77/fw1/CTX/CTX00001/conf/local.arp" file. 

How we add the entries without the local.arp file? Now it is kernel based .

0 Kudos
1 Reply
Wolfgang
Mentor
Mentor
‎2019-09-13 11:59 AM

Hello HS,

 

ther's a simple way to add a proxy arp entry to a gateway without configuring via the GAiA portal/ clish or using local.arp

Add a host object with your external IP to your rulebase and configure automatic NAT (static). As NAT-IP use the same external IP, add the relevant gateway and do a policy install. With this host object the gateway adds an proxy arp entry to the the gateway with the correct MAC.

We use this with loadsharing bond and active/passive bond and VSX. It works too with vMAC.

Wolfgang

proxy_arp1.PNGproxy_arp2.PNG