RE: [FW1] Routing Question

["Gibson, Brian" <GibsonB@FW1-NOSPAMgruntal.com>]

Title: RE: [FW1] Routing Question

Not possible given that config. 

What you need to do is change either the router or FW address so that you can subnet them down to a 30 bit mask.  What you can do is keep the router the same but change the FW interface to 64.157.60.253 and then change the mask for that interface to /30(or 255.255.255.252)  That will at least get the traffic off the subnet.

Of course you're not done yet.  Next you need to change your router to point to the new FW interface.

Understand that this config can run into serious routing issues very quickly.  Make sure you don't advertise the net between the FW and router.  Also don't let any of your hosts use 64.157.60.252-255.

That is a pretty odd configuration.

-----Original Message-----
From: Jeff Reinhardt [mailto:jeff@xfiresoftware.com]
Sent: Thursday, April 12, 2001 8:40 PM
To: fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: [FW1] Routing Question

I have a Class C address block.  I need to be able to
route the traffic and I am having a hard time here.

Router - 64.157.160.254

FW1 -  64.157.160.1  (public)

FW1 - 192.168.10.1 (DMZ)

I need to route all traffic to all other 64.157.160.* IPs through
the DMZ interface.

Can anyone assist me on this?

Jeff

================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================