[FW1] static NAT to remote networks

["Belanger, Derek" <DBelange@FW1-NOSPAMcomversens.com>]

SW:	Checkpoint 4.0
OS:	NT 4.0

I need to static NAT addresses in a network behind the FW, but remote to its
interface. I believe I know how this would work but need a sanity check
please. 

Procedure would be the same as with a local network EXCEPT that there would
not be an explicit route to the 'Workstations' IP address. Instead what is
needed is an explicit route to the 'Workstations' gateway. 

Example

Workstation's Public address 63.1.1.3 to be translated to 192.1.2.3 
Workstation's GW 192.1.2.1 255.255.255.0

FW external 63.1.1.1 
FW internal 192.1.1.1 
FW GW to 192.1.2.0 255.255.255.0 = 192.1.1.2

=================YOU WOULD===================
Route add -p 63.1.1.3 255.255.255.0 192.1.1.2
=============================================

Is this correct?


Thanks,
--Derek









================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================