Re: [FW1] Routing & Multiple Subnets

["Mark Ingles" <inglesm@FW1-NOSPAMvoyager.spjc.cc.fl.us>]

I'm guessing at the actual command, but it probably looked like this?
route add 200.200.200.200 MASK 255.255.255.255 172.16.1.5
with 200.200.200.200 as the valid IP of the server you're natting?
You might want to try it without the mask
route add 200.200.200.200 172.16.1.5

What is your default route? It should point to your Internet router, and 
you should only have a default on the external card.

HTH,
Mark Ingles

At 12:32 PM 9/20/2000, you wrote:

> I have a FW1 4.0 box and I have objects defined with valid IP addresses and
> NAT.  I can get to all of the servers on the .1 network, but can't get to
> any of the servers on the other subnets. My configuration is as follows:
>
> Internet ---- router ---- FW1 ---- 172.16.1 network ---- Internal Gateway
> (router) ---- 172.16.2 network
>                                                         172.16.1.5
>                                                         |       |
>                                                         |       |
>                                                 172.16.3 net    172.16.6 net
>
> In the routing table on the FW, the routes are as follows:
>
> Network Destination             Gateway
> 172.16.1.0                      172.16.1.200 (internal NIC of FW)
> 172.16.2.0                      172.16.1.5 (internal gateway - router)
> 172.16.3.0                      172.16.1.5 (internal gateway - router)
> 172.16.6.0                      172.16.1.5 (internal gateway - router)
>
> Not only can I not get to the other subnets, when I try to add a route for a
> server to one of these subnets (valid IP, netmask, gateway, interface), I
> get an error message that says, "Route addition failed: 87."
>
> Any assistance would be most appreciated.
>
> Thanks, Michelle
> _____________________
> Michelle Johnston
> Network Manager, NHRA
> 2035 Financial Way
> Glendora, CA 91741
> phone:fax:MJ@nhra.com



================================================================================
    To unsubscribe from this mailing list, please see the instructions at
              http://www.checkpoint.com/services/mailing.html
================================================================================