[FW1] how to configure a virtual IP for a host behind the FW

["Sim, CT (Chee Tong)" <CheeTong.Sim@FW1-NOSPAMsin.rabobank.com>]

Hello.. Dear Friends,

I really need your helps. We want to create a virtual IP for a host in the
DMZ zone.  Let me tell you FW setting first.

Interface 1 : LOCAL net   IP(A):57.200.165.10 and IP(B):57.200.165.20
Interface 2 : DMZ net     IP(C):10.168.165.1
Interface 3 : Untrusted (not important)
We have a WSS host sitting on the DMZ zone IP(D):10.168.165.1, and it is
directly connected to (C)

Our requirement:  We need to PCAnywhere from the localnet to the WSS (D)
using the virtual IP address on the Firewall interface IP (A), as we don't
want to let other people to know WSS real IP.  Can it be done?

What we had tried: We telnet the target to (A), and for (A) we configured
its static NAT to transform to (D). Assume our policy can let every packet
pass thru, and ignore route table issue.  But what we get is still the
firewall, the packet just stop at A and won't carry on to D. Can you help
me?  How to telnet to D using A's IP  What is the configuration like.

Thank you very much,
Tong




   

-----Original Message-----
From: security@247customer.com [mailto:security@247customer.com]
Sent: Wednesday, October 11, 2000 2:28 PM
To: fw-1-mailinglist@lists.us.checkpoint.com
Subject: [FW1] Two Routers connected to two different ISP's



Hi all,


We have two routers connected to two different ISP's. Now we want to
consolidate both links bandwidth and route it through the Checkpoint
Firewall. We have taken checkping enterprise license.

In this case ..

1. Is that I have to use two NIC's on the Firewall and register two IP's
with Checkpoint.

2. If I do as I have mentioned in Point 1, is that I have to do Natting from
my Internal network to both the external interfaces (two Nics).

regs

sathish m r




============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====

==================================================================
De informatie opgenomen in dit bericht kan vertrouwelijk zijn en 
is uitsluitend bestemd voor de geadresseerde. Indien u dit bericht 
onterecht ontvangt wordt u verzocht de inhoud niet te gebruiken en 
de afzender direct te informeren door het bericht te retourneren. 
==================================================================
The information contained in this message may be confidential 
and is intended to be exclusively for the addressee. Should you 
receive this message unintentionally, please do not use the contents 
herein and notify the sender immediately by return e-mail.


==================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================