- Products
- Learn
- Local User Groups
- Partners
- More
AI Security Masters E7:
How CPR Broke ChatGPT's Isolation and What It Means for You
Blueprint Architecture for Securing
The AI Factory & AI Data Center
Call For Papers
Your Expertise. Our Stage
Good, Better, Best:
Prioritizing Defenses Against Credential Abuse
Ink Dragon: A Major Nation-State Campaign
Watch HereCheckMates Go:
CheckMates Fest
Hi,
I'm having trouble setting the default gateway behind another interface but the WAN on my SMB.
Background
For our customer's SMB 770 installation I need to use the following interface config:
WAN: DHCP IP
LAN1: fixed IP + by default traffic needs to be routed this way
LAN2: fixed IP
I configured the following:
1) Internet1 = DHCP, but without "route traffic through this interface by default"
2) LAN2: no issue there, it's just a LAN interface with a connected network
And tried adding the default gateway via LAN1:
1) Configured LAN1 IP in the WebUI (but I'd need to add the default route, which does not accept 0.0.0.0/0).
2) Next I tried adding interface IP and GW via CLI:
set interface LAN1 ipv4-address x.x.x.x mask-length 24 default-gw x.x.x.y
Should be simple, but this returns the error "Failed to find the requested interface"
What am I missing here?
Grtz
Philip
Had similar issue, no Internet connection configured at all.
This is how you solve this issue, let say the nexthop is 10.10.1.15, you just create 2 routes:
add static-route destination 0.0.0.0/1 nexthop gateway ipv4-address 10.10.1.15
add static-route destination 128.0.0.0/1 nexthop gateway ipv4-address 10.10.1.15
Effectively this is 2 half default routes adding up to a default route.
The error about the Interface could be related to the LAN1_Switch, to remove use the following:
delete switch LAN1_Switch
set dhcp server interface LAN1 disable
set interface LAN1 unassigned
set interface LAN1 ipv4-address 10.10.1.1 mask-length 29 state on
The LAN interface cannot be used as the default route on SMB appliances.
Hi Dameon,
Thanks for your answer.
I filled out a Request for Enhancement for this.
Grtz
Philip
Had similar issue, no Internet connection configured at all.
This is how you solve this issue, let say the nexthop is 10.10.1.15, you just create 2 routes:
add static-route destination 0.0.0.0/1 nexthop gateway ipv4-address 10.10.1.15
add static-route destination 128.0.0.0/1 nexthop gateway ipv4-address 10.10.1.15
Effectively this is 2 half default routes adding up to a default route.
The error about the Interface could be related to the LAN1_Switch, to remove use the following:
delete switch LAN1_Switch
set dhcp server interface LAN1 disable
set interface LAN1 unassigned
set interface LAN1 ipv4-address 10.10.1.1 mask-length 29 state on
Thx Maarten, I'll definitely try that when the issue comes along again!
If you plan to follow these steps, do not use the "state on" at the end of the command:
set interface LAN1 ipv4-address 10.10.1.1 mask-length 29 state on
Using state on will result in the firewall not setting the IP. (1800 SMB r81.x.x)
Leaderboard
Epsum factorial non deposit quid pro quo hic escorol.
| User | Count |
|---|---|
| 4 | |
| 3 | |
| 3 | |
| 3 | |
| 2 | |
| 2 | |
| 1 | |
| 1 | |
| 1 | |
| 1 |
Tue 28 Apr 2026 @ 06:00 PM (IDT)
Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAFThu 30 Apr 2026 @ 03:00 PM (PDT)
Hillsboro, OR: Securing The AI Transformation and Exposure ManagementTue 28 Apr 2026 @ 06:00 PM (IDT)
Under the Hood: Securing your GenAI-enabled Web Applications with Check Point WAFTue 12 May 2026 @ 10:00 AM (CEST)
The Cloud Architects Series: Check Point Cloud Firewall delivered as a serviceThu 30 Apr 2026 @ 03:00 PM (PDT)
Hillsboro, OR: Securing The AI Transformation and Exposure ManagementAbout CheckMates
Learn Check Point
Advanced Learning
YOU DESERVE THE BEST SECURITY