AW: [FW1] DMZ SETUP

["Marc Rink" <m.rink@FW1-NOSPAMelix-group.com>]

Hello!

exact situation here:
placed a router to a private WAN in my DMZ. Need to do the following:
- Added a route to the WAN subnet(s) to my Nokia via Voyager
- Set up a NAT Rule:
  .Original
   Source:Internal Network
   Destination:WAN Subnet(s) (see above)
   Service:Any
  .Translated
   Source:DMZ_Interface of Firewall
   Destination:Original
   Service:Any
- Added a Rule:
   Source:Internal Network
   Destination:WAN Subnet(s)
   Service:Any
   Action:Accept

Objects created:
- Internal Network
- WAN Subnet(s)
- DMZ_Interface of Firewall

This worked. Any Comments from you Gurus out there concerning this?

Regards
Marc

> -----Ursprüngliche Nachricht-----
> Von: David.Maas@iSKY.com [mailto:David.Maas@iSKY.com]
> Gesendet: Sonntag, 3. Juni 2001 15:52
> An: fw-1-mailinglist@beethoven.us.checkpoint.com
> Betreff: [FW1] DMZ SETUP
>
>
>
> I would like to find out how to setup a DMZ off my firewall?
> I have a client that we have a dedicated circuit to their
> office. We need to
> access a server on the clients network. I would like to
> connect the router
> to my firewall, and then have the necessary traffic destined
> to there server
> go over this connection. How can I set this up.
> I know to configure an interface on the firewall, and the
> Ethernet of the
> router, but what else must I do, what objects do I need to
> create, what
> routing do I need to add etc.
> My firewall is a Nokia IP440.
> Any help/suggestions would be appreciated.
>
> Internet
>    |
>    |
> Firewall ------- router ---------link to client--- server
>    |
>    |
>    |
> Internal network -----workstations
>
> David Maas
>
>
>
> ==============================================================
> ==================
>      To unsubscribe from this mailing list, please see the
> instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
>
>



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================