June 12, 2014 by Sean Doggett
The purpose of this blog is to demonstrate how to go about
configuring Proxy ARPs in GAIA via the WebUI.
Configuring Proxy ARPs in Check Points GAIA Operating System has become that much simpler compared to its predecessor SPLAT (Secure Platform). In SPLAT, you were required to configure Proxy ARPs through editing the “local.arp” file which could be found in “$FWDIR/conf” directory. If this file didn’t already exist, you would have to create it and then make the necessary changes. Proxy ARPs allow a security gateway to respond on behalf of IP addresses that are not assigned to the gateway itself.
The purpose of this blog is to demonstrate how to go about configuring Proxy ARPs in GAIA via the WebUI.
Start by logging into the WebUI of the Security Gateway. Once logged in, select “ARP” from the menu on the left hand side of the window.
The page presented offers multiple options relating to ARP configuration. At this page it is possible to configure Static ARP entries, ARP Table settings including the maximum amount of entries allowed and the validity timeout, and of course Proxy ARP.
To add a proxy ARP address, simply click the “Add” button.
There are few items that need to be entered to configure a proxy ARP which we will walk through. The IPv4 address should be set to the IP address in which the Proxy ARP is being configured. Next, it is necessary to select where the Proxy ARP will respond from, this can be done in two different ways, either by specifying the interface on which to respond to the IP address being configured, or by entering the MAC address of the interface in which the gateway should respond. Finally, enter the IP address that is assigned to the interface in which the Proxy ARP will respond.
For more information on configuring Proxy ARP check out the following Check Point knowledge base article: link.