[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW1] Securemote Routing problem
I have secureclient 4.1 installed & working properly for the primary network on the internal interface of FW1 4.1 SP2 on a Nokia 330. Internal Interf. on firewall is 10.2.1.1. When I ping any address from SecureClient on the 10.2.1.0 network i get a response. I am trying to setup another network 10.1.1.0 which has a router on the 10.2.1 network of 10.2.1.20. I have setup a static route in the Nokia Voyager for the 10.1.1.0/24 network to use GW 10.2.1.20. Internally, this is working perfectly. All the clients use the firewall (10.2.1.1) as their default gateway and when they try to ping 10.1.1.1, they are redirected to the router. However, when I try to ping 10.1.1.1 from SecureClient, the request times out. It's making it through the firewall and when I do a tcpdump on the internal int. of the firewall, it seems like it is just throwing the ICMP packet out on the 10.2.1. network without directing it to 10.2.1.20. Below are the two lines from the tcpdump. The first one shows the SecureClient (192.168.0.179) pinging an IP on the 10.2. network succesfully. The next line shows what happens when I ping 10.1.1.1. It appears not to be processing the static route. 10:07:56.500492 192.168.0.179 > 10.2.1.2: icmp: echo request 10:08:00.338750 192.168.0.179 > 10.1.1.1: icmp: echo request Does secureclient bypass Nokia Vayager static routes? If so, how would I accomplish what I'm trying to do? Thanks for any help. Eric Mandel ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|