{"id":1650,"date":"2025-09-07T13:45:41","date_gmt":"2025-09-07T13:45:41","guid":{"rendered":"https:\/\/virtualall.sk\/?p=1650"},"modified":"2026-09-11T14:45:05","modified_gmt":"2026-09-11T14:45:05","slug":"check-point-vsx-a-nastavenie-dhcp-relay","status":"publish","type":"post","link":"https:\/\/virtualall.sk\/en\/2025\/09\/check-point-vsx-a-nastavenie-dhcp-relay\/","title":{"rendered":"Check Point VSX DHCP Relay &#8211; Configuration"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">V prostred\u00ed virtualizovan\u00e9ho firewallu <strong>Check Point VSX<\/strong> je \u010dast\u00fdm scen\u00e1rom potreba zabezpe\u010di\u0165, aby klienti v r\u00f4znych VLAN sie\u0165ach dostali adresy z centr\u00e1lneho DHCP servera. Ke\u010f\u017ee DHCP je zalo\u017een\u00e9 na <strong>broadcastovej komunik\u00e1cii<\/strong>, paket sa \u0161tandardne nepren\u00e1\u0161a za hranice L2 siete. Pr\u00e1ve tu vstupuje do hry <strong>DHCP Relay agent<\/strong> \u2013 komponent, ktor\u00fd zabezpe\u010d\u00ed preposlanie DHCP po\u017eiadaviek z broadcastu do unicastu smerom na definovan\u00fd DHCP server.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Ako funguje DHCP Relay<\/h4>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Klient v sieti vy\u0161le <strong>DHCP Discover<\/strong> na adresu 255.255.255.255.<\/li>\n\n\n\n<li>Firewall\/VSX, na ktorom je nakonfigurovan\u00fd DHCP Relay, tento broadcast zachyt\u00ed.<\/li>\n\n\n\n<li>Relay agent zabal\u00ed p\u00f4vodn\u00fa po\u017eiadavku do unicastu a po\u0161le ju na definovan\u00fd DHCP server (napr. 147.232.50.50).<\/li>\n\n\n\n<li>Odpove\u010f z DHCP servera sa n\u00e1sledne prenesie sp\u00e4\u0165 ku klientovi cez relay.<\/li>\n<\/ul>\n\n\n\n<pre style=\"font-family: monospace; font-size:14px; line-height:1.2;\">\n+----------+        VLAN 902         +----------------+        Unicast        +------------------+\n|  Client  | --- DHCP Discover --->  |  Check Point   | --- DHCP Request ---> |  DHCP Server     |\n|  10.101  |                         |  VSX (bond1.902)| <--- DHCP Reply ---- | 192.168.50.50    |\n+----------+                         +----------------+                       +------------------+\n         (broadcast 255.255.255.255)          Relay agent\n<\/pre>\n\n\n\n\n<p class=\"wp-block-paragraph\">V tejto topol\u00f3gii m\u00e1te na <strong>VSku vytvoren\u00fd interface <code>bond1.902<\/code><\/strong> s adresou 10.101.2.1, na ktorom funguje DHCP relay. Relay je nastaven\u00fd tak, aby forwardoval po\u017eiadavky na server <strong>192.168.50.50<\/strong>.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Konfigur\u00e1cia DHCP Relay v CLI<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">V\u00e1\u0161 konkr\u00e9tny pr\u00edklad konfigur\u00e1cie vyzer\u00e1 takto:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>set bootp interface bond1.902 relay-to 147.232.50.50 on\nset bootp interface bond1.902 primary 10.101.2.1 wait-time 0 on\nset bootp interface bond1.902 on<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Overenie nastavenia cez pr\u00edkaz:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>show bootp interface bond1.902<\/code><\/pre>\n\n\n<div class=\"wp-block-image\">\n<figure class=\"aligncenter size-full\"><img loading=\"lazy\" decoding=\"async\" width=\"390\" height=\"243\" src=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek.png\" alt=\"Konfigur\u00e1cia DHCP Relay v CLI\" class=\"wp-image-1651\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek.png 390w, https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek-300x187.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek-18x12.png 18w\" sizes=\"auto, (max-width: 390px) 100vw, 390px\" \/><\/figure>\n<\/div>\n\n\n<p class=\"wp-block-paragraph\">V\u00fdstup potvrdzuje, \u017ee relay be\u017e\u00ed a forwarduje po\u017eiadavky na zvolen\u00fd DHCP server.<\/p>\n\n\n\n<h4 class=\"wp-block-heading\">Firewall pravidl\u00e1<\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">D\u00f4le\u017eit\u00fd krok, na ktor\u00fd sa \u010dasto zab\u00fada, je vytvorenie firewallov\u00e9ho pravidla. DHCP Relay posiela broadcastov\u00e9 po\u017eiadavky z klientov na adresu <strong>255.255.255.255<\/strong>, ktor\u00e9 musia by\u0165 explicitne povolen\u00e9 v bezpe\u010dnostnej politike.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Odpor\u00fa\u010dam teda prida\u0165 pravidlo:<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Source:<\/strong> va\u0161a klientsk\u00e1 sie\u0165 (napr. 10.101.2.0\/24)<\/li>\n\n\n\n<li><strong>Destination:<\/strong> 255.255.255.255<\/li>\n\n\n\n<li><strong>Service:<\/strong> DHCP (UDP\/67)<\/li>\n\n\n\n<li><strong>Action:<\/strong> Accept<\/li>\n<\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Toto pravidlo zabezpe\u010d\u00ed, \u017ee relay bude schopn\u00fd zachyti\u0165 a spracova\u0165 broadcasty.<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"20\" src=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek-1-1024x20.png\" alt=\"Firewall pravidl\u00e1\" class=\"wp-image-1652\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek-1-1024x20.png 1024w, https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek-1-300x6.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek-1-768x15.png 768w, https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek-1-18x1.png 18w, https:\/\/virtualall.sk\/wp-content\/uploads\/2025\/09\/obrazek-1.png 1357w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\"><\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">S\u00favisiace n\u00e1vody<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><a href=\"https:\/\/virtualall.sk\/2025\/07\/vyznam-a-fungovanie-https-inspection-v-korporatnom-prostredi\/\">HTTPS Inspection v korpor\u00e1tnom prostred\u00ed<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2022\/08\/checkpoint-zvecsenie-particie-log\/\">Check Point zv\u00e4\u010d\u0161enie part\u00edcie log<\/a><\/li>\n\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p><!--:sk-->Ako nakonfigurova\u0165 DHCP Relay na Check Point VSX? Rie\u0161enie pre klientov v r\u00f4znych VLAN, ktor\u00ed potrebuj\u00fa centr\u00e1lny DHCP server. CLI pr\u00edkazy: set bootp interface bond1.902 relay-to [IP] on. D\u00f4le\u017eit\u00e9: firewall pravidlo pre broadcast 255.255.255.255 na UDP\/67.<!--:--><!--:en-->How to configure DHCP Relay on Check Point VSX? Solution for clients in different VLANs who need a central DHCP server. CLI commands: set bootp interface bond1.902 relay-to [IP] on. Important: firewall rule for broadcast 255.255.255.255 on UDP\/67.<!--:--><\/p>\n","protected":false},"author":1,"featured_media":1653,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[83],"tags":[220],"class_list":["post-1650","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-checkpoint","tag-check-point-firewall"],"_links":{"self":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/1650","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/comments?post=1650"}],"version-history":[{"count":10,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/1650\/revisions"}],"predecessor-version":[{"id":2423,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/1650\/revisions\/2423"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media\/1653"}],"wp:attachment":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media?parent=1650"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/categories?post=1650"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/tags?post=1650"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}