We have an old Checkpoint NGX FW1 firewall which we have to maintain. For the most part we leave it alone and it just chuggs away and works. The person who originally set it up left years ago and we've muddled though administering it for years.

Today I want to add a new network to it. Something we've done before when we want to connect a customers network to our network.

Setup as follows:

(InternalNet)    <-> Switch     <-> Checkpoint Eth0      <0> Checkpoint Eth2 <-> Customers Router <-> (CustomersNetwork)   

The firewall becomes a routing device. Not ideal, however it's what we have to deal with.

I have adjusted the OS IP for the NIC (linux based OS) using sysconfig and added the IP into the SmartDashboard, Checkpoint topology area. Created a network under 'Networks' for the new network as configured the topology for eth2 to use the specific customers network I setup.

I've also added a rule in the firewall to allow internal traffic to access the customers network.

With this configuration from the checkpoint OS I can ping the customers router and get a response. I can also ping another device I have attached to the customers router.

I can't ping past eth2 NIC from my network. I can ping eth2 IP and get a response, but I don't get a response from the router if I ping it from my laptop.

Other NIC traffic (it's also used as a external internet gateway) works fine on eth3.

I have missed a step, but I don't know what.

How can I correctly configure the FW to route traffic to the correct NIC from my internal network.

  • 1
    What is the default gateway of the router? If not checkpoint, is there a route saying that should go thru – user130370 Aug 29 '12 at 11:52
  • You know what, I have no idea. It arrived and I can connect to the customers network if a PC is hooked directly too it on the same range but I doubt it has any routes in it for our network. A very good point. – Damo Aug 29 '12 at 12:07

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.