Re: [FW1] local.arp for natting not picking up

[bandit@FW1-NOSPAMzcore.net (Carl E. Mankinen)]

Don't forget that even once you have the mac addresses in the local.arp file
that you still need to configure routing usually with static routes.

arp then route then nat.

route add o.o.o.o i.i.i.i -p
o = outside address you are arping for
i = the interface on the firewall where the host can be found.

----- Original Message -----
From: "Murphy, Paul" <Paul.Murphy@lloydstsb.co.uk>
To: "jayant nashikkar" <jgnashikkar@usa.net>;
<fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Wednesday, September 20, 2000 8:29 AM
Subject: RE: [FW1] local.arp for natting not picking up


>
>
> I personally have had no problems with local.arp on NT, though this
doesn't
> mean there are none.
>
> If you have a device on the 202.54.44.0 network, perhaps the router, you
> should try pinging the firewall, www and email external addresses
>
> Don't expect a response, but if you then check the arp cache (show arp on
> Cisco, arp -a on NT), you should see the MAC entries for the three IP
> addresses are the same (ie the firewall mac address).
>
> If not, then you need to ensure the local.arp syntax is correct.
>
> Paul.
>
>
> -----Original Message-----
> From: Tika Mahata [mailto:tikafw@yahoo.com]
> Sent: 20 September 2000 12:42
> To: jayant nashikkar; fw-1-mailinglist@lists.us.checkpoint.com
> Subject: Re: [FW1] local.arp for natting not picking up
>
>
>
> I've more confident in static route in router than
> local.arp in NT.
> --- jayant nashikkar <jgnashikkar@usa.net> wrote:
> >
> > hello guys,
> > Pl. help me inspite of making entries in local.arp
> > in
> > the state dir of firewall and also adding route on
> > firewall to point to the natted host what else could
> > be
> > the problem, iam not getting any way .my scenario is
> > as
> > follows;
> >
> > internet(202.54.44.1)
> > |
> > |
> > firewall( www,mail)(202.54.44.2,202.54.44.3)
> > natted for (192.168.0.2,192.168.0.3)
> > internal int.of firewall-192.168.0.1
> > ext.int.of firewall 202.54.44.1
> > |
> > |
> > internal network 192.168.0.0
> > natting done using xlate.conf ie fwxlconf.
> >
> >
> >
> ____________________________________________________________________
> > Get free email and a permanent address at
> > http://www.netaddress.com/?N=1
> >
> >
> >
>
============================================================================
> ====
> >      To unsubscribe from this mailing list, please
> > see the instructions at
> >
> > http://www.checkpoint.com/services/mailing.html
> >
>
============================================================================
> ====
>
>
> __________________________________________________
> Do You Yahoo!?
> Send instant messages & get email alerts with Yahoo! Messenger.
> http://im.yahoo.com/
>
>
>
============================================================================
> ====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
> ====
>
>
> --------------------------------------------------------------------------
---------------------------------------------
> This e-mail is intended only for the above addressee.  It may contain
> privileged information. If you are not the addressee you must not copy,
> distribute, disclose or use any of the information in it.  If you have
> received it in error please delete it and immediately notify the sender.
>
> evolvebank.com is a division of Lloyds TSB Bank plc.
> Lloyds TSB Bank plc, 71 Lombard Street, London EC3P 3BS.  Registered in
> England, number 2065.  Telephone No: 020 7626 1500
> Lloyds TSB Scotland plc, Henry Duncan House, 120 George Street,
> Edinburgh EH2 4LH.  Registered in Scotland, number 95237.  Telephone
> No:>
> Lloyds TSB Bank plc and Lloyds TSB Scotland plc are regulated by the
> Personal Investment Authority and represent only the Scottish Widows
> and Lloyds TSB Marketing Group for life assurance, pensions and
> investment business.
>
> Members of the UK Banking Ombudsman Scheme and signatories to the UK
> Banking Code.
> --------------------------------------------------------------------------
---------------------------------------------
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================