Check Point L-71 - Page 66

Appliance Configuration
Check Point 1400 Appliances Centrally Managed Administration Guide R77.20.85 | 66
• Status - Shows a status for physical interfaces and wireless networks:
 Physical interfaces - Shows cable connection status of each physical interface that is
enabled. Otherwise, it shows disabled.
 Wireless networks - Shows if the wireless network is up or disabled.
To create/edit a switch:
Note - Between the LAN ports of a switch, traffic is not monitored or inspected. MAC filtering is
disabled.
Configure the fields in the tabs:
Configuration tab
1.
In Switch Configuration, select or clear the interfaces you want to be part of the switch. The
table shows you which interfaces are already part of the switch (shown with checkmarks in the
table) and which interfaces are not assigned yet and can be added to the switch (empty
checkboxes in the table). For example, if LAN8 is already part of another switch, it does not
show in this table.
2.
From Assigned to, select an option:
• Unassigned - The switch is not part of any network and cannot be used
• Separate network - When you select a separate network, configure the settings for the
switch
• Monitor Mode - See below
3.
Choose the IP address and Subnet mask the switch uses.
4.
Use Hotspot - Select this checkbox to redirect users to the Hotspot portal before allowing
access from this interface. Hotspot configuration is defined in the Device > Hotspot page.
5.
In DHCP Server:
Select one of the options:
• Enabled - Enter the IP address range and if necessary the IP address exclude range. The
appliance's own IP address is automatically excluded from this range. You can also exclude or
reserve specified IP addresses if you define network objects in the Users & Objects > Network
Objects page. To reserve specified IP addresses, you must have the device MAC address.
• Relay - Enter the DHCP server IP address.
• Disabled
IPv6 Auto Assignment for IPv6 configurations:
• SLAAC (Stateless Address Autoconfiguration) - The host selects its own full IPv6 address
after it receives the IPv6 address prefix from the gateway. The appliance cannot reserve an
IPv6 address for a specific host (Mac Address).
Note - The common use case is a prefix length of 64. If you change it from 64, make sure the
internal hosts support the new length.
• DHCPv6 Server - Same as the DHCPv4. You can reserve an IP address for a specified host.
• DHCPv6 Server Relay - Same as in IPv4.
• Disabled (Static)