Can I use my Quantum Spark 1800 Appliance as a switch ?

[CCXK]

Hello everyone,

I have bought Quantum Spark 1800 Appliance but I'm new on it I want to use it as a swtich to monitor packages over the devices on my network.

Just be informed that I have:

Router Mikrotik 4011 Port1, Port2 and Port3 are WAN from 3 ISP's.

The SFP port I'm using for LAN network.

From RB4011 SFP Port - I have connected CRS317 than with fiber on other devices like CRS328....

Now my question it's:

To connect the Quantum Spark 1800 Appliance between RB4011 and CRS317 than to use the range of IP Addresses that I have from RB4011 is it possible ?

For information: I'm using range of IP Addresses 192.168.0.1/16 like 10,20,30,40,50 etc. as static IP addresses and 172.16.0.1/23 for DHCP (WiFi).

Thanks 🙂 Hope to get help about this !

[PhoneBoy · Accepted solution]

If I'm understanding correctly, the RB4011 is a Layer 3 device (i.e. it has WAN ports) and the CRS317 is a switch, correct?
Yes, this is supported if you configure a bridge.
Refer to: https://sc1.checkpoint.com/documents/SMB_R81.10.05/AdminGuides/Locally_Managed/EN/Content/Topics/Con...
Note the bridge will have to have a configured IP. 

[CCXK]

Thanks dear,

Now I got another question about the WAN ports (WAN and WAN-B) it's possible to include on br0 those ports too ?

[PhoneBoy]

Yes, you can bridge together WAN and LAN ports.

[CCXK]

Yeah, thanks.

But now when I create a policy they don't apply to network ?

[PhoneBoy]

The Outgoing rules only applies when the traffic will be routed (not bridged) to a WAN interface.
Create the relevant rules in the Internal section.

[CCXK]

Hello,

I have created a bridge with LAN1 Switch, DMZ, Internet1 and LANWR, internet it's working but now the public addresses that are on RB4011 doesn't work ?

Should I make changes to routing ?

[PhoneBoy]

The gateway should have the default route configured as well as routes for any other networks the gateway may need to reach out to.

When you say "doesn't work" what exactly do you mean?
How precisely did you test it from where and what was the exact result?

[CCXK]

When you say "doesn't work" what exactly do you mean? 

Are not routed I have tried to add them on but I don't have any option ?

Please see the picture below 

[PhoneBoy]

Did you click on either of the Any's above?

Note the Default Route will need to be set on the Internet connection configuration (Device > Internet).

[CCXK]

Yes this one 

What I sholud change there ?

[PhoneBoy]

This is where you would configure the IPs/networks you are having trouble reaching and the "next hop" address required to reach them per your network configuration.