VIP configuration on a CSS (proxy arp issue?)

Unanswered Question
May 5th, 2008
User Badges:


I have a CSS11501S-K9 running version sg0810107s ( and am having problems with a VIP.

The setup is:

Checkpoint FW (



Cisco CSS


I want to use VIP's on the CSS in the range, but I don't actually want to assign the CSS or the firewall an IP in that range.

The checkpoint has a route to via the IP address of the CSS (

Is this configuration supported? I know that the CSS has to do a proxy arp for the VIP to be active, but I thought this was automatic?

I can ping the VIP address from the CSS.

Thanks in advance for your help.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
andrew-kearton Mon, 05/05/2008 - 23:24
User Badges:

Oh dear, my content rule was listening on the wrong port :-/

Problem now solved (i.e there wasn't one in the first place!)


This Discussion