Not able to reach Lan interface of VSX

[Captain_Igen]

I have setup a Lab and not able to reach VSX Lan interface. Please find the attached Lab diagram

All traffic is allowed on VS and i am able to reach Win PC 172.16.1.100. However i am not able to reach 172.16.1.1 from win pc.

I am not able to find any solution for this. Please guide me to fix this.

Please find the TCPDUMP output . I am suspecting firewall is not replying to ARP.

[_Val_]

I think it is normal. VS is most probably answering with its "funny IP", which break the ping. To check that, run FW monitor while pinging and see

[_Val_]

On the second thought, please check here:

https://sc1.checkpoint.com/documents/R80.30/WebAdminGuides/EN/CP_R80.30_VSX_AdminGuide/html_frameset...

[Captain_Igen]

Hi Mate,

Thanks for reply. I installed policy on VS-2 however it is still showing default one.

I run fw unloadlocal and was able to ping VS-2 Lan IP that is 172.16.1.1, but i am not able to figure out why policy is not installing on VS-2.

[JackPrendergast]

Do you have any screenshots of the policy installation?

[Captain_Igen]

Hi Jack,

Please find snapshot.

 

[JackPrendergast]

And what errors do you get when you try install a policy? @Captain_Igen