RE: [FW1] IP NAT POOL and SecuRemote

["Hartmann, Josef" <hartmann@FW1-NOSPAMsecunet.de>]

Hi,

this works if you are setting up the rulebase appropiately (at least for
me). Search Checkpoint's knowledgebase for running X windows over VPN
(Client-to-Site).


Regards,

Josef

> -----Original Message-----
> From:	PVerdonck@erudict.com [SMTP:PVerdonck@erudict.com]
> Sent:	Thursday, June 07, 2001 3:10 PM
> To:	fw-1-mailinglist@beethoven.us.checkpoint.com;
> fw1wizards@phoneboy.com
> Subject:	[FW1] IP NAT POOL and SecuRemote
> 
> 
> 
> Hi,
> 
> I have set up Hybrid IKE in combination with an IP NAT POOL. The VPN
> (SecuRemote) client on the Internet is able to connect to the devices on
> the
> internal LAN. With a packet- sniffer I can see that one of the IP NAT Pool
> addresses is used by the VPN-client to enter the internal LAN. So far so
> good, the VPN-client is able to access the internal machines. That works
> fine.
> 
> But now I want to connect to the VPN client from an internal machine
> (after
> the VPN-client has set up a VPN connection to the internal LAN ) using the
> address the VPN-client obtained from the IP NAT Pool. The packets arrive
> encrypted at the VPN-client on the internet but the client does not
> respond
> to them.
> 
> Has someone else already tried this out with success? If yes, could you
> tell
> which policy and nat rules (and other settings) has to be configured to
> make
> this all work?
> 
> Thanks in advance!!
> 
> Kind Regards
> 
> 
> 
> 
> 
> 
> __________________________________________________
> The information in this Internet e-mail is confidential and may be legally
> privileged. It is intended solely for the addressee.
> Access to this Internet e-mail by anyone else is unauthorized.
> 
> If you are not the intended recipient, any disclosure, copying,
> distribution or any action taken or omitted to be taken in reliance on it,
> is prohibited and may be unlawful. When addressed to our clients any
> opinions or advice contained in this Internet e-mail are subject to the
> terms and conditions expressed in any applicable governing LCI Technology
> Group terms of business or client engagement letter.
> 
> 
> 
> ==========================================================================
> ======
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================