Re: [FW1] NAT and additional subnets

["Andrew Bagrin" <andrewb@FW1-NOSPAMsecure-1.com>]

You need to create a local.arp file in your state dir.  Put in,   external
IP  [TAB] Mac of external NIC.
Why don't you use your existing addresses?  Use hide NAT for those who don't
need valid IP addresses.
Andrew Bagrin
Secure-1www.secure-1.com
----- Original Message -----
From: <T.Higgins@eu.hns.com>
To: <fw-1-mailinglist@lists.us.checkpoint.com>
Sent: Thursday, November 16, 2000 5:46 AM
Subject: [FW1] NAT and additional subnets


>
> Hi
>
> We need to add some more Static NAT and non-NAT machines onto our network.
>
> Need sanity check on proposed solution:-
>
> 1. Get an additional subnet from ISP (already underway anyway)
> 2. Configure Internet router External Interface to have new secondary Ip
> address from new range (from Step 1)
> 3. Add new LAN card to Firewall (NT SP4, FW 4.0 SP4) and address from new
> range above (from Step 1)
> 4. Add route on Fwall/router appropriately
> 5. Change selected user  workstations to new IP address range
> 6. Add new static and non-NAT rules for these workstation
> 7. Do something with local arp file ?
>
>
> Comments please.
>
>
> Thanks
>
>
> Tim Higgins
>
>
>
>
> #**********************************************************************
> This message is intended solely for the use of the individual
> or organisation to whom it is addressed. It may contain
> privileged or confidential information.  If you have received
> this message in error, please notify the originator immediately.
> If you are not the intended recipient, you should not use,
> copy, alter, or disclose the contents of this message.  All
> information or opinions expressed in this message and/or
> any attachments are those of the author and are not
> necessarily those of Hughes Network Systems Limited,
> including its European subsidiaries and affiliates. Hughes
> Network Systems Limited, including its European
> subsidiaries and affiliates accepts no responsibility for loss
> or damage arising from its use, including damage from virus.
> #**********************************************************************
>
>
>
============================================================================
====
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
>
============================================================================
====



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================