1.png?resize=272%2C3201.png?resize=272%2C32010-3-2014%2B10-36-29%2BPM.png?resize=200%2C13710-3-2014%2B10-36-29%2BPM.png?resize=200%2C137This lab is an example for a typical VSX Deployment scenario – one shared external Interface to Internet and separate Internal interfaces for each VSX virtual firewall.

This lab also is second part of earlier post :
Creating Checkpoint VSX and Virtual System – Part 1 

In that previous post, it already shows how to create a new VSX gateway through SmartConsole. This lab will show the steps how to create two VSX virtual firewalls and how to set up a virtual router. Two internal interfaces will be used to test the traffics from two different networks. 

Topologies:

CPLAB.png?resize=640%2C513CPLAB.png?resize=640%2C513

Basically, in this lab, there is one physical VSX gateway with two logical VSX virtual firewalls. Each virtual VSX virtual firewall has two interfaces , External and Internal.

Steps:

1. Follow the previous post “Creating Checkpoint VSX and Virtual System – Part 1” to add a new VSX gateway into Smart Dashboard.

The new VSX Gateway has four physical interfaces as shown in the following:

  • Eth0 Mgmt:192.168.2.41
  • Eth1 EXT: for 172.17.3.x External Network
  • Eth2 LAN1: for 192.168.99.x – VSX1 Internal Network
  • Eth3 LAN2: for 10.9.200.x – VSX2 Internal Network

After new VSX Gateway (CP-VSX) added into Smart Dashboard, the webUI in browser will show:
Web UI is not supported in VSX mode. Please use Clish for OS configuration.

 2.Adding vsx1 and vsx2 into CP-VSX

10-5-2014%2B9-18-05%2BAM.png?resize=400%2C27010-5-2014%2B9-18-05%2BAM.png?resize=400%2C270

10-5-2014%2B9-19-01%2BAM.png?resize=400%2C19210-5-2014%2B9-19-01%2BAM.png?resize=400%2C192

10-5-2014%2B9-20-56%2BAM.png?resize=362%2C40010-5-2014%2B9-20-56%2BAM.png?resize=362%2C400
v2-1.png?resize=363%2C400v2-1.png?resize=363%2C400

3.  Check Network Topologies on both vsx1 and vsx2

10-5-2014%2B9-45-43%2BAM.png?resize=640%2C60010-5-2014%2B9-45-43%2BAM.png?resize=640%2C600

10-5-2014%2B9-46-47%2BAM.png?resize=640%2C60210-5-2014%2B9-46-47%2BAM.png?resize=640%2C602