[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] RE: [FW1] SecuRemote behind NAT Netopia issue
I really haven't tried it behind a Netopia. If you have it configured properly it should work. "Should" being the favorite word here... Anyhow, if you are using IKE (ISAKMP), try using UDP Encapsulation and see if it works... Amin Tora, CISSP ePlus Technology http://www.eplus.com NASDAQ: PLUS -----Original Message----- From: Chris Arnold [mailto:[email protected]] Sent: Friday, March 30, 2001 9:53 PM To: '[email protected]' Subject: [FW1] SecuRemote behind NAT Netopia issue Hi. I have a user with a Win 2k laptop behind a Netopia 7100 series DSL router doing private to public hide-behind NAT. He has SR build 4176 installed without desktop policy support (just SR, not SC). He is using a private address which is not conflicting with any other addresses. He is able to authenticate properly to the enforcement point and I see traffic from him in the log but nothing appears to work properly. This has been attempted in two ways: (1) plain vanilla SR build 4176 from CP and (2) client modifications of the userc.C file and FW modifications of the objects.C file according to http://www.phoneboy.com/faq/0141.html. I have a test rule at the FW which states: users@any; Any; Any; Client Encrypt; Account; etc... In addition, I have a SonicWall at my home and am able to authenticate perfectly with both of our sets of credentials as well as send/receive any traffic I like. Both of our set-ups are identical with the exception of our SOHO FWs. Has anyone any experience with getting SR to work through a Netopia to a Nokia with CP FW-1 v 4.1 SP 2 or 3? Much thanks in advance for pointers or nudges in the correct direction. Chris ============================================================================ ==== To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ============================================================================ ==== ================================================================================ To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================================================
|