Trunking on Check Point SecurePlatform

Trunking on Check Point SecurePlatform.

Trunking is a feature that will pass the VLAN database between network devices. Usually this mechanism is used between switches-routers or switches-switces.

Maybe some of us wonder about configuring trunking on Check Point devices that using SPLAT operating system. This trunking configuration is needed when we lack of switch devices and want to do an interVLAN routing to the  Check Point device.

In general, Check Point won’t refer  this as a VLAN  trunking , that is  why you won’t see it in their console/portal/ brochures. You will see  only mentioned an 802.1q support which is the VLAN mechanism that is supported.

 

Below are the steps that will help us to configure VLAN trunking on Check Point SPLAT:

1. Go to the WebUI. Then under the intefaces, you can add a new VLAN interface by being asked the VLAN ID, IP address, subnet mask, and the physical inteface.

 

2. For example, we create the VLAN 13, 20, 22, 75 on physical interface called LAN 3

 

3. The configuration will result like below:

 

4. Remember to not configure the IP address on the physical interface. In this example, don’t configure the IP address on  “LAN 3” interface.

 

5. The physical interface will be the trunking port automatically.

 

6. If you are not able to configure the VLANs via WebUI then add the VLANs manually via CLI by executing command “sysconfig“. After executing sysconfig, you must configure the same steps like above.

 

7. Don’t forget to configure your switch device to allow VLAN 13,20,22,75 from the Check Point firewall. In this example, we use Cisco Switch and the configuration is like below:

interface GigabitEthernet1/1
switchport trunk encapsulation dot1q
switchport mode trunk switchport trunk allowed vlan 13,20,22,75

 

Hope our steps will help you configure the trunking on Check Point SPLAT.

 

Pictures by Check Point forums  and cwbestbuy

avatar
We are teams that have the same hobbies in Information Technologies and have experienced in many fields regarding Information Technologies .

Related Articles

Email
Print