CPUG: The Check Point User Group

Resources for the Check Point Community, by the Check Point Community.


I'd like to thank everyone involved for making "The CPUG Challenge" a great success.
We helped a lot of people see and learn a bit more about R80.10, while having some fun.
We will be using this success to try and bring more events to more locations soon. -E

 

Page 2 of 2 FirstFirst 12
Results 21 to 25 of 25

Thread: NAT Problem with ARP Table

  1. #21
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,083
    Rep Power
    12

    Default Re: NAT Problem with ARP Table

    Quote Originally Posted by jflemingeds View Post
    .. on a fresh install? Think it would still be disabled if you upgraded?

    I think the biggest thing missing is setting the cluster id on the cluster object. Seems crazy thats set on the gateway.
    R80.10 uses Auto MAC Magic to automatically derive a Cluster ID to avoid conflicts between separate clusters that result in a "Ready" state among other problems. Command is "cphaprob mmagic"; you can also check out the details of this feature from a new R80.10 cpview screen for ClusterXL under "Advanced".
    --
    My book "Max Power: Check Point Firewall Performance Optimization"
    now available via http://maxpowerfirewalls.com.

  2. #22
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,458
    Rep Power
    8

    Default Re: NAT Problem with ARP Table

    Quote Originally Posted by ShadowPeak.com View Post
    R80.10 uses Auto MAC Magic to automatically derive a Cluster ID to avoid conflicts between separate clusters that result in a "Ready" state among other problems. Command is "cphaprob mmagic"; you can also check out the details of this feature from a new R80.10 cpview screen for ClusterXL under "Advanced".
    Praise Bob!

  3. #23
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,083
    Rep Power
    12

    Default Re: NAT Problem with ARP Table

    Quote Originally Posted by jflemingeds View Post
    Praise Bob!
    Yeah can finally talk about all this R80.10 stuff openly now instead of dropping cagey, irritatingly vague hints about future software releases..
    --
    My book "Max Power: Check Point Firewall Performance Optimization"
    now available via http://maxpowerfirewalls.com.

  4. #24
    Join Date
    2011-08-02
    Location
    http://spikefishsolutions.com
    Posts
    1,458
    Rep Power
    8

    Default Re: NAT Problem with ARP Table

    Quote Originally Posted by ShadowPeak.com View Post
    Yeah can finally talk about all this R80.10 stuff openly now instead of dropping cagey, irritatingly vague hints about future software releases..
    I demand a spilling of beans of features you've deemed cool since you're obviously hold back on everyone!

  5. #25
    Join Date
    2009-04-30
    Location
    Colorado, USA
    Posts
    2,083
    Rep Power
    12

    Default Re: NAT Problem with ARP Table

    Quote Originally Posted by jflemingeds View Post
    I demand a spilling of beans of features you've deemed cool since you're obviously hold back on everyone!
    Gotta let Check Point have their flurry of publicity this week first, but the R80.10 release notes do a pretty good job of mentioning all the new features.

    Third free addendum for my Max Power book will be released early next week and will cover all of the new performance-related R80.10 features of which there are quite a few. The updated addendum was actually written months ago, I just need to cross-check all the official R80.10 documentation against what I wrote earlier and make sure I didn't miss anything.

    A preview: The SecureXL templating rules have been significantly relaxed in R80.10 gateway and makes most of the Chapter 7 (SecureXL Session Rate Acceleration) optimizations no longer necessary. Many many other performance limitations called out in the book have also been resolved in R80.10.
    Last edited by ShadowPeak.com; 2017-05-17 at 15:49.
    --
    My book "Max Power: Check Point Firewall Performance Optimization"
    now available via http://maxpowerfirewalls.com.

Page 2 of 2 FirstFirst 12

Similar Threads

  1. Import NAT table to SS
    By imathias in forum NAT (Network Address Translation)
    Replies: 1
    Last Post: 2010-05-21, 22:15
  2. why the connections in table 'fwx_alloc' are much more than table 'connections'?
    By fatalerr in forum NAT (Network Address Translation)
    Replies: 3
    Last Post: 2010-05-19, 08:57
  3. NAT translation table
    By charliey_2000 in forum NAT (Network Address Translation)
    Replies: 1
    Last Post: 2008-10-08, 16:49
  4. ISP redundance table
    By eigrich in forum ISP Redundancy
    Replies: 1
    Last Post: 2006-12-22, 11:30
  5. Base.def & table.def
    By decom in forum Miscellaneous
    Replies: 0
    Last Post: 2005-08-22, 10:34

Bookmarks

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •