Check Point L-71 - Page 60

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 60
Note - When the gateway is behind a modem that works as a NAT device, the MTU value of the
gateway must be the same value as in the modem. If the modem has a PPPoE connection, set
the MTU in the gateway to 1492 or lower.
• MAC address clone - If you select Override default MAC address, you can override the default
MAC address used by the Internet connection. This is useful when the appliance replaces
another device and wants to mimic its MAC address.
• If necessary, select Disable auto negotiation. This lets you manually define the link speed of
the Internet connection.
• Select the Link Speed.
QoS Settings (bandwidth control) - supported in IPv4 connections only
To enable QoS bandwidth control for download and upload for this specified connection, select the
applicable Enable QoS (download) and/or Enable QoS (upload) checkboxes. Enter the maximum
Kbps rates for the selected options as provided by your ISP for the Internet upload and download
bandwidth.
Make sure that the QoS blade is turned on. You can do this from Home > Security Dashboard >
QoS > ON.
ISP Redundancy - supported in IPv4 connections only
Multiple Internet connections can be configured in High Availability or Load Sharing modes. When
you configure more than one Internet connection, the Device > Internet page lets you toggle
between these options. The Advanced setting of each Internet connection lets you configure each
connection's priority or weights based on the set mode.
• Clear the Route traffic through this connection by default checkbox when you do not want this
Internet connection used as a default route for this gateway. The connection is used by the
device only if specific, usually service-based, routing rules are defined for it. This is commonly
used when you have a connection that is used for dedicated traffic. When you clear this option,
this connection does not participate in High Availability or Load Balancing.
• High Availability - Priority - Select the priority for the connection. Lower priority connections
are only used if higher priority connections are unavailable.
• Load Balancing - Weight - The traffic to the Internet is divided between all available
connections based on their weights.
NAT Settings
If the gateway's global hide NAT is turned on in the Access Policy > NAT page, you can disable
NAT settings for specified internet connections.
To disable NAT settings:
1.
Go to Device > Internet.
2.
Select an internet connection and click Edit.
The Edit Internet Connection window opens.
3.
Click Advanced > NAT Settings.
4.
Select Do not hide internal networks behind this internet connection.
5.
Click Apply.