Re: [FW1] Secure Remote behind NAT DSL router

[Yim Lee <yimwlee@FW1-NOSPAMyahoo.com>]

1.  You must use IKE
2.  Your client's private ip address must not be in
your encryption domain.
3.  This link is helpful.

http://support.checkpoint.com/kb/docs/public/firewall1/5_0/docs/PT1_Hybrid.doc

HTH

Yim
--- Lee Christie <lee@corpnetsecurity.com> wrote:
> 
> I am currently having trouble getting a Windows 98
> machine to connect from
> behind a NAT'd device.  I am using 4.1 sp2 firewall
> that was upgraded from
> 4.0.  I edited the objects.c file and changed the
> lines to :userc_NAT (true)
> :userc_IKE_NAT (true).  The NAT'ing on the Router is
> a hide NAT.
> 
> I am using Firewall-1 password for authentication. 
> I have tried both IKE
> and FWZ for encryption.   However when I select just
> IKE and not FWZ on the
> firewall,  my client errors out with error in
> exchanging keys with firewall.
> 
> I have IKE checked as an option under my firewall
> object VPN tab.  I have
> also choosen pre-shared secret.
> 
> My questions are
> 
> 1)  Exactly how do I need to setup the client to use
> IKE?  Please include
> everything that I will need to perform this.  Do I
> need IKE defined in my
> firewall object?  If so do I choose pre-shared
> secret?
> 
> 2)  Is there anything special I need on the client
> in order to get this
> working?
> 
> 
> And finally I would like to thank those who help me
> in advance.
> 
> 
> 
> 
>
================================================================================
>      To unsubscribe from this mailing list, please
> see the instructions at
>               
> http://www.checkpoint.com/services/mailing.html
>
================================================================================
> 


__________________________________________________
Do You Yahoo!?
Make international calls for as low as $.04/minute with Yahoo! Messenger
http://phonecard.yahoo.com/


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================