[FW1] FW with subnetted network

["Hoang" <waldo32@FW1-NOSPAMeasystreet.com>]

Hi Folks.

I have this running for a while now, and this is a sanity check.  Here is my
setup.

I have two internal networks split up by a router.  The addresses are:
192.168.1.0 for net 1, and 192.168.2.0 for net 2.  The router interfaces has
IPs of 192.168.1.1 and 192.168.2.1 for the two networks.  My workstations
are using the router's IPs as the gateway addresses.

 My FW-1 internal interface is 192.168.1.2 and sitting on net 1.  I have set
my router to to forward all packets (that it cannot route) to the FW-1
interface.  I have add network 1.0 and 2.0 to my FW-1 routing table.

Net 2 ---------Router----------Net 1
                                         |
                                         |----FW-1--------Border
router----------the World.

Question is am I doing it right?  NAT is working OK for both Networks.  My
user can surf the Net OK.  My consultant suggest I set my workstations to
use 192.168.1.2 (FW interface) as the gateway.  The chances of bringing down
a FW (for upgrade, patches, crashes) are greater than the router.  That
would disrupt operation quite often.  What would you think?



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================