Configuring IP Broadcast Helper in Gaia Clish

Important - In a Cluster Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.

To see the available "set" commands for IP Broadcast Helper, enter in Gaia Clish The name of the default command line shell in Check Point Gaia operating system. This is a restricted shell (role-based administration controls the number of commands available in the shell).:

set iphelper[Esc][Esc]

To see the available "show" commands for IP Broadcast Helper, enter in Gaia Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems. Clish:

show iphelper[Esc][Esc]

Parameters

Parameter

Description

forward-nonlocal {off | on}

Controls whether packets are forwarded that are not locally originated by a source directly on the receiving interface.

Enable (on) this option to forward packets, even if the source is not directly on the receiving interface.
Disable (off) this option (this is the default) to require that packets are generated by a source that is directly on the receiving interface to be eligible for relay.

<Name of Interface>

Specifies the interface, on which the IP helper service runs.

interface <Name of Interface> off

Disables the IP Broadcast Helper on the specified interface.

udp-port <1-65535>

Specifies the number of the UDP port in the client UDP packets that should be forwarded by the interface to the relay destination

Important - You cannot use ports 67 and 68 that are reserved for DHCP Relay.

udp-port <1-65535> off

Disables the UDP port configured on this interface.

relay-to <Destination IPv4 Address> {off | on}

Specifies the IPv4 unicast address (x.x.x.x) or IPv4 broadcast address (255.255.255.255), to which the interface forwards the client UDP packets.

You can configure more than one relay IPv4 address.

Important:

The IPv4 address specified must not be an address belonging to the local machine.
Packets are not forwarded to any destination IP address that uses the same interface as the incoming UDP broadcast.

Procedure

Connect to the command line.
Log in to Gaia Clish.

Configure the Forward Non-local Packets option.

Enable this option to forward packets, even if the source is not directly on the receiving interface.

set iphelper forward-nonlocal on

Disable this option (this is the default) to require that packets are generated by a source that is directly on the receiving interface to be eligible for relay.

set iphelper forward-nonlocal off

Configure the interface, the UDP port in client packets, and the destination IPv4 address:

set iphelper interface <Name of Interface> udp-port <1-65535> relay-to <Destination IPv4 Address> on

Save the configuration:

save config