[FW1] Fw: FW with subnetted network

["Hoang" <waldo32@FW1-NOSPAMeasystreet.com>]

> Hi Folks.
>
> I have this running for a while now, and this is a sanity check.  Here is
my
> setup.
>
> I have two internal networks split up by a router.  The addresses are:
> 192.168.1.0 for net 1, and 192.168.2.0 for net 2.  The router interfaces
has
> IPs of 192.168.1.1 and 192.168.2.1 for the two networks.  My workstations
> are using the router's IPs as the gateway addresses.
>
>  My FW-1 internal interface is 192.168.1.2 and sitting on net 1.  I have
set
> my router to to forward all packets (that it cannot route) to the FW-1
> interface.  I have add network 1.0 and 2.0 to my FW-1 routing table.
>
> Net 2 ---------Router----------Net 1
>                                          |
>                                          |----FW-1--------Border
> router----------the World.
>
> Question is am I doing it right?  NAT is working OK for both Networks.  My
> user can surf the Net OK.  My consultant suggest I set my workstations to
> use 192.168.1.2 (FW interface) as the gateway.  The chances of bringing
down
> a FW (for upgrade, patches, crashes) are greater than the router.  That
> would disrupt operation quite often.  What would you think?
>



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================