NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

RE: [FW1] Remote Subnet access through FW-1 4.0



Thank you Dan, we added the route to the Next Hop address from the External
address and made it persistent and we are in Business! We had all the other
routes and had contemplated adding this route, but had not yet. We noticed
similar types of routes for our other NATed device on this subnet, but when
we tried to add the route to the machine address itself we got an NT error.
We did not consider using the next hop address instead, thank you again.

Ken Claussen MCSE CCNA CCA
IT Coordinator
Retail Planning Associates-----Original Message-----
From: dan snyder [mailto:[email protected]]
Sent: Wednesday, October 25, 2000 8:45 PM
To: Claussen, Ken
Subject: Re: [FW1] Remote Subnet access through FW-1 4.0


add a route on the firewall from the Valid address to the invalid address
(or next hop to that address) make this route persistent.

dan snyder
----- Original Message -----
From: "Claussen, Ken" <[email protected]>
To: "Fw-1-Mailinglist (E-mail)" <[email protected]>
Sent: Tuesday, October 24, 2000 11:08 AM
Subject: [FW1] Remote Subnet access through FW-1 4.0


>
> I am having trouble exposing a host on a remote subnet to the outside
world.
> We have recently added a second subnet needing to be accessed by our
> Checkpoint 4.0 firewall. So far we have not been able to make the objects
> exportable successfully. The subnet (192.168.13.x) is across a frame relay
> (12 channels) connection and an intermediate private (192.168.14.x)
network.
> Network traffic behind the firewall works correctly, however the objects
we
> have defined in the firewall cannot be reached from the outside using
there
> NATed address. We have a rule in the firewall that prohibits all traffic
> destined for the firewall itself. We have added the arp entries, and the
log
> shows traffic being accepted for the connection, however the remot
> connection never receives a response. My thought was since it is a remot
> subnet we will have to insert the rule before the rule which drops all
> traffic destined for the firewall itself. I have tried Checkpoint's site,
> but we could not find our username and password and the "Public" info did
> not contain this level of info. Has anyone else tried to make objects on
> remote subnets exportable? We want to route mail and web traffic over
there,
> but so far it has not worked. All suggestions would be appreciated.
>
>
> Ken Claussen MCSE CCNA CCA
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====
>


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.