RE: [FW1] Multiple subnets on CP Nokia IP330

["Witham, John" <jwitham@FW1-NOSPAMtakedapharm.com>]

Here's 3 parts to your answer:

a) You can use Voyager to add another IP address to a NIC.  We have several
IP650s that have 4 subnets onto one physical interface.

b) Where are you adding the new subnet?  From your message, it sounds like
you want it "in front" of the FireWall, on the same network as your existing
external IP?  If you want the new subnet protected, tell your ISP to forward
all the traffic to your existing external interface.  Your 330 turns into a
"frouter" and routes the traffic to one of your internal interfaces that has
the new IP your ISP has assigned.  Depending on if you are allowing external
resources in, it can be bad to have 2 subnets on 1 NIC (especially if you're
on a hub versus a switched network!)

c) You only need to license the external IP if you are getting rid of your
current external IP.

HTH,

-john


-----Original Message-----
From: Gus Reyes [mailto:greyes@douglas-danielle.com]
Sent: Friday, May 11, 2001 10:38 AM
To: Fw-1-Mailinglist@Beethoven.Us.Checkpoint.Com (E-mail)
Subject: [FW1] Multiple subnets on CP Nokia IP330



I've run out of IP's and want to add another subnet to be protected by my
firewall.  Currently, i've got a a.b.c.d/27 network set up.  I've been
approved for another subnet a.b.e.f/28. My ISP has added the new route to
their router so it's on the same wire that's plugged into my CP external
interface.  My question is
how do I configure Nokia's external interface w/ 2 IP's, and the 2nd
internal interface for my 2nd subnet?  Also, does this mean I have to
license the other external IP?

Thanks in advance for your response.

Gus



============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================