Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've set up a virtual lab network in vmware with two networks. vmnet2 ( and vmnet3 (

My R75 is having the ip addresses and, and is the default gateway for both of these networks.

This firewall will inspect and route packets from the network to, and vica versa.

However, during the configuration phase of the R75, I am forced to set a default gateway. In my setup, this does not make any sense, as my lab only have two networks, and no other routers.

Is my setup too unrealistic for checkpoint, or do I just miss some knowledge about the need for a default gateway?

share|improve this question

Shouldn't matter what the default gateway is. My guess is that Check Point asks for it to determine what interface should be considered "External" for the topology configuration. Whatever lab network is less trusted is where you should point your default gateway.

If it's asking while you're installing SecurePlatform, you can probably just remove the default gateway after the install is complete within the web admin tool.

share|improve this answer

There is no harm in having a default gateway, you can set it to anything (reachable). It won't be use for traffic within the two connected networks anyway.

share|improve this answer
what about the implications this setup would cause. The current setup only contain the firewall, and a client on each of the network. Wouldn't setting a default route, where there is none break the ICMP unreachable generation? – Dog eat cat world Sep 11 '11 at 9:50
I also discussed this with some colleagues today, and the best solution would be to set the default gateway to an ip that is unreachable (in an unknown network). This should make the router behave properly when faced with unroutable destination addresses. – Dog eat cat world Sep 12 '11 at 15:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.