CheckPoint filtering/routing problem

[Albert.Chen]

I have recently bought a new layer 3 switch and setup 2 vlans, 192.168.101.0 and 192.168.100.0 network, but for some reason the hosts in my vlan 101.0 cannot access to internet at all. I did a snoop on the hosts and eventaully they reach CP, but the problem is CP doesn't seem to process the packets at all, and I have set to log the traffic and they dont show up in the log also. My checkpoint interface is sided in 100.x network. I have also tried to allowed 101.o net to any any, but still won't work. ANyone knows what is the problem? I have added the route in my OS already also. Please hlep.

[dantro]

Sounds like you have an anti-spoofing issue.
Create a new network object with your .101 network. Create a group and put this network into it. Also place the network object with your .100 network into this group. Go to your firewall object and edit its properties. In 'Topology', edit the .100 interface > topology and use your new group to specify the IP-adresses behind this internal interface.

[Albert.Chen]

Hey thanks for the reply and I have successfully get it work!! Thanks for the great help man!!! Really appreciate it.