Re: [FW1] Gateway-Gateway VPN including NAT

[Chris F <freaknetboy@FW1-NOSPAMyahoo.com>]

I have never done this, so this is my guess on how you
would get started. I would *think* it would work...

Just be sure that FWB allows IPSEC traffic to pass
thru it (e.g. a rule that allows FWa/c to FWa/c with
IPSEC as service)...

Also, be sure that FWb does NOT have "Decrypt on
Accept" checked in it's FW Properties.

Since FWC has a fake IP, then you will have to put in
a special NAT rule for FWb to translate it for you.
This could get messy.

Good Luck -- Chris


--- "Hartmann, Josef" <hartmann@secunet.de> wrote:
> 
> Hi,
> 
> I would like to setup the following configuration:
> 
>              NAT                                    
>         NAT
> -LAN1 --------
>
FW-A-------Internet--------FW-B--------LAN2------FW-C--------LAN3
> 
> FW-A and FW-B have public IP addresses, FW-C does
> not.
> 
> I would like to setup a VPN tunnel between FW-A and
> FW-C.
> 
> Is that possible using Checkpoint v4.1SP3 and if yes
> how can this be done?
> 
> 
> Cheers,
> 
> Josef
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================
> 


__________________________________________________
Do You Yahoo!?
Yahoo! Auctions - buy the things you want at great prices
http://auctions.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================