NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW1] anti-spoofing on aliased interfaces




FW-1 ignores virtual interfaces. You need to define two network objects (
one per subnet) then create a network group with them in. Then use this
group in the anti spoofing entry of the physical interface.
Paul
--------------------------------------------------------------------------------------------

C. Paul Simons
Corporate Network Services
IHS Energy Group, Englewood, CO.

Main:Direct:Fax:Mobile:Lance Spitzner <[email protected]>                                                                                   
                    Sent by:                                    To:     [email protected]                          
                    [email protected]        cc:                                                                       
                    kpoint.com                                  Subject:     [FW1] anti-spoofing on aliased interfaces                    
                                                                                                                                          
                                                                                                                                          
                    29-09-00 12:33                                                                                                        
                                                                                                                                          
                                                                                                                                          





I've aliased an interface (hme0:1) on FW ver 4.1, running on Solaris.

Can one add an aliased interface to the interface objects
on a firewall?

Can one setup anti-spoofing on an aliased interface?

Last, does the aliased interface show up on the 'fw stat -li'
command?

Thanks!

--
Lance Spitzner
http://www.enteract.com/~lspitz




================================================================================

     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================





================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents � 2003 Network Presence, LLC. All rights reserved.