Aliases

Set the value of the kernel parameter fwha_arp_support_aliases to 1:

1. Connect to the command line on the Security Group.

2. Log in to the Expert mode.

3. Configure the value temporarily (does not survive reboot):

   g_fw ctl set int fwha_arp_support_aliases 1

4. Make sure the new value is set:

   g_fw ctl get int fwha_arp_support_aliases

5. Configure the value permanently (requires reboot - you can reboot later at any time):

   g_update_conf_file $FWDIR/boot/modules/fwkern.conf fwha_arp_support_aliases=1

In Gaia gClish of the applicable Security Group, add the applicable interface alias:

1. Connect to the command line on the Security Group.

2. Log in to Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell)..

3. Go to Gaia gClish: enter gclish and press Enter.

4. Add the applicable interface alias:

   add interface <Name of Interface> alias <IPv4 Address>/<Mask Length>

   Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

   Note - A new alias interface name is automatically created by adding a sequence number to the original interface name. For example, the name of first alias added to eth1 is eth1:1. The second alias added is eth1:2, and so on.

Update the topology of the Security Gateway Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. object in SmartConsole Check Point GUI application used to manage a Check Point environment - configure Security Policies, configure devices, monitor products and events, install updates, and so on.:

1. Connect with SmartConsole to the Management Server Check Point Single-Domain Security Management Server or a Multi-Domain Security Management Server. that manages this Security Group.

2. Open the applicable Security Gateway object.

3. From the left tree, click Network Management.

4. Click Get Interfaces > Get Interfaces with Topology.

   Best Practice - In the Topology > Leads To section, use the default topology settings in the interface, on which you add an interface alias (and not the Override option). Otherwise, it is not possible to link alias networks to the applicable interface.

5. Make sure the information is correct and click Accept.

6. Click OK.

Install the Access Control Policy on this Security Gateway object.

Make sure the configuration is consistent on all Security Group Members:

1. Connect to the command line on the Security Group.

2. Log in to the Expert mode.

3. Run:

   config_verify -v

In Gaia gClish of the applicable Security Group, delete the applicable interface alias:

1. Connect to the command line on the Security Group.

2. Log in to Gaia Clish.

3. Go to Gaia gClish: enter gclish and press Enter.

4. Add the applicable interface alias:

   delete interface <Name of Interface> alias <Name of Alias Interface>

   Important - After you add, configure, or delete features, run the "save config" command to save the settings permanently.

Update the topology of the Security Gateway object in SmartConsole:

1. Connect with SmartConsole to the Management Server that manages this Security Group.

2. Open the applicable Security Gateway object.

3. From the left tree, click Network Management.

4. Click Get Interfaces > Get Interfaces with Topology.

   Best Practice - In the Topology > Leads To section, use the default topology settings in the interface, on which you delete an interface alias (and not the Override option).

5. Make sure the information is correct and click Accept.

6. Click OK.

Install the Access Control Policy on this Security Gateway object.

Make sure the configuration is consistent on all Security Group Members:

1. Connect to the command line on the Security Group.

2. Log in to the Expert mode.

3. Run:

   config_verify -v