Re: [FW1] Securemote Routing problem

[Peter Goodridge <petegdr@FW1-NOSPAMyahoo.com>]

Hi Eric,

Two questions:

1.  If you ssh to the Nokia box, can you ping
10.1.1.0/24 from the Nokia box?

2.  Can you access the Internet from the 10.1.1.0/24
network though the Nokia box?  If not you might need a
default route on the 10.2.1.20 router to the Nokia
box.

HTH,
Pete Goodridge

--- Eric Mandel <EMandel@worldnow.com> wrote:
> 
> I have secureclient 4.1 installed & working properly
> for the primary network
> on the internal interface of FW1 4.1 SP2 on a Nokia
> 330. 
> 
> Internal Interf. on firewall is 10.2.1.1. When I
> ping any address from
> SecureClient on the 10.2.1.0 network i get a
> response. I am trying to setup
> another network 10.1.1.0 which has a router on the
> 10.2.1 network of
> 10.2.1.20. I have setup a static route in the Nokia
> Voyager for the
> 10.1.1.0/24 network to use GW 10.2.1.20. Internally,
> this is working
> perfectly. All the clients use the firewall
> (10.2.1.1) as their default
> gateway and when they try to ping 10.1.1.1, they are
> redirected to the
> router. 
> 
> However, when I try to ping 10.1.1.1 from
> SecureClient, the request times
> out. It's making it through the firewall and when I
> do a tcpdump on the
> internal int. of the firewall, it seems like it is
> just throwing the ICMP
> packet out on the 10.2.1. network without directing
> it to 10.2.1.20. Below
> are the two lines from the tcpdump. The first one
> shows the SecureClient
> (192.168.0.179) pinging an IP on the 10.2. network
> succesfully. The next
> line shows what happens when I ping 10.1.1.1. It
> appears not to be
> processing the static route.
> 
> 10:07:56.500492 192.168.0.179 > 10.2.1.2: icmp: echo
> request
> 10:08:00.338750 192.168.0.179 > 10.1.1.1: icmp: echo
> request
> 
> Does secureclient bypass Nokia Vayager static
> routes? If so, how would I
> accomplish what I'm trying to do?
> 
> 
> Thanks for any help.
> 
> Eric Mandel
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================


__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================