Step:-0 take Backup of CS and CE-Router both

Ste:-1 connect LAN interface of check point to L3's Switch

Step:-2 enabling Firewall's LAN interface with IP address x.x.x.x/24. Creating Rule and NAT for Guest
Wireless on Firewall

Step:-3 Creating VRF Guest on CS

ip vrf Guest

rd 65282:666

Step:-4 Creating L2 and L3 ports on CS

Interface gig0/19

swit mode access

swit access vlan 666

Interface Vlan 666

Description Portland GUEST Vlan

ip vrf forwarding Guest

ip address x.x.x.x 255.255.254.0

Step-5 Enabling Routing on CS for Guest Wifi

ip route vrf Guest 0.0.0.0 0.0.0.0 x.x.x,x

Step-6 Creating DHCP on Core Switch

ip dhcp excluded-address x.x.x.1 x.x.x.9

ip dhcp excluded-address x.x.x.240 x.x.x.254

ip dhcp pool Portland_Guest_Scope

vrf Guest

Network x.x.x.0 255.255.255.0

Default-router x.x.x.1

Dns-server 8.8.4.4 4.2.2.2

Step-7 Before Testing

CE-Router

Interface Tunnel65282

Shut

No ip dhcp excluded-address x.x.x.x

No ip dhcp pool Portland_Guest_Scope

no ip vrf Guest

Core-Switch

Interface gig0/19

No shut

Step-8 Testing by ISA