Gateway configuration on AWS instances - Check Point CheckMates

Gateway configuration on AWS instances

Hello, I created a simple lab with standalone Check Point r80.10 VM and a Linux (Ubuntu server) instance on AWS.

The internal interface and Linux server are in the same subnet (10.0.1.0/24). The IP address of the gateway's internal interface is 10.0.1.202 and the Linux instance has IP 10.0.1.10. The AWS system configured 10.0.1.1 as Linux server gateway; for this reason, NAT configuration performed by CP gateway doesn't work (there isn't return traffic).

I configured a specific route for my current public IP address on Linux server with 10.0.1.202 as gateway and in this case, the machine is reachable from the internet.

I need to change the default gateway of the Linux server manually? Is this the normal behavior?

During the Check Point instance configuration I selected the option to distribute the CP as gateway...

Thanks a lot

• Tags:
  • aws
  • cloudguard iaas
  • gateway

User Responses

Vladimir
Champion
Posted on 2018-11-03 at 07:20 AM

Please see my article VSEC Deployment Scenarios in AWS.

I believe the first one addresses your requirements.

You have to have a route table associated with the internal subnet pointing to the gateway's internal IP.

Cristian_F_CCSM
Contributor
Posted on 2018-11-04 at 09:59 AM

Hello, thanks a lot, we will update you during the next days.

Cristian_F_CCSM
Contributor
Posted on 2018-11-09 at 12:59 PM

Hello, we corrected the route table linked to the internal subnet. The internal server maintains the gateway 10.0.1.1 but now the return traffic through CP is OK.

Thanks again.