Kernel Options

Introduction

Route Injection Mechanism (RIM) enables a Security GatewayClosed Dedicated Check Point server that runs Check Point software to inspect traffic and enforce Security Policies for connected network resources. to use dynamic routing protocols to propagate the encryption domain of a VPN peer Security Gateway to the internal network and then initiate back connections.

When a Security Gateway establishes a VPN tunnel, RIM updates the local routing table of the Security Gateway to include the encryption domain of the VPN peer.

In GaiaClosed Check Point security operating system that combines the strengths of both SecurePlatform and IPSO operating systems., the Route Injection Mechanism adds routes directly to the kernel.

You must explicitly configure Gaia to keep these routes in the kernel.

For more about configuring RIM, see the R81 Site to Site VPN Administration Guide.

Important - In a ClusterClosed Two or more Security Gateways that work together in a redundant configuration - High Availability, or Load Sharing., you must configure all the Cluster Members in the same way.

Configuring Kernel Routes in Gaia Portal

To configure Gaia to keep the RIM routes in kernel:

  1. From the left navigation tree, click Advanced Routing > Routing Options.

  2. In the Kernel Options section, select the Kernel Routes option.

  3. In the Routing Options section (at the top), click Apply.

To configure Gaia not to keep the RIM routes in kernel:

  1. From the left navigation tree, click Advanced Routing > Routing Options.

  2. In the Kernel Options section, clear the Kernel Routes option.

  3. In the Routing Options section (at the top), click Apply.

Configuring Kernel Routes in Gaia Clish

To configure Gaia keep the RIM routes in kernel:

  1. Enable the option:

    set kernel-routes on

  2. Save the configuration:

    save config

  3. Examine the configuration:

    show configuration kernel-routes

To configure Gaia not to keep the RIM routes in kernel:

  1. Disable the option:

    set kernel-routes off

  2. Save the configuration:

    save config

  3. Examine the configuration:

    show configuration kernel-routes