AW: [FW1] Routing in NT with 3 nic's

[Christian Betz <christian.betz@FW1-NOSPAMprodacta.de>]

Hi Bob,

if you are natting this third segment, wou have to place static host routes
form externel official range to the DMZ range and also Nat Rules. Then it
may work...

Regards,

Christian Betz
System Engineer
eSecurity Solutions

Prodacta Systemhaus GmbH 
Pforzheimer Str. 160    Fon: +49 (0) 7243 382 308
D-76275 Ettlingen       Fax: +49 (0) 7243 382 107
Germany                 Mob: +49 (0)http://www.prodacta.de

----Ursprüngliche Nachricht-----
Von: Roan, Wayne [mailto:wroan@cbc-raleigh.com]
Gesendet: Montag, 13. August 2001 20:54
An: 'Bob Billington'
Cc: fw-1-mailinglist@beethoven.us.checkpoint.com
Betreff: RE: [FW1] Routing in NT with 3 nic's



Do you have default gateways setup on both NICs?  You can only have one
default gateway per NT box.  I have four NICs in my firewall, but only the
one connecting the firewall to the Internet router has a default gateway,
any other configuration and general routing does not work.  One thing you
can try is to stop Checkpoint services and see if routing works, if it does
not, then there is a network layer problem.  You MUST have routing working
before starting Checkpoint or its useless.

-----Original Message-----
From: Bob Billington [mailto:the_chucklingc@yahoo.com.au]
Sent: Sunday, August 12, 2001 3:22 AM
To: fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: [FW1] Routing in NT with 3 nic's



Folks,

I have an NT 4 (sp 6a) host with three nics.  The
first has an external IP address (206.43.x.x) and
directly connects to our router.  The second nic has a
192.168.1.x address with static NAT - this is
working!!

My problem is - the third nic.  This nic has an
external IP address (206.67.x.x) and I can not seem to
connect to it from the Internet side of the firewall. 


When I check the routing table, there is an entry for
the 206.67.x.x network and has its gateway as the
address I have assigned at the firewall.  The address
of the nic itself has a gateway of 127.0.0.1.  I have
tried to add a route that points the 206.67.x.x
network to the external interface of the firewall,
however this was unsuccessful.

I have an any any any accept rulebase, and when I
ping, I do not get any joy.

Is this a routing issue? should I be considering proxy
arps's? 

your help would be much appreciated...

thanks


____________________________________________________________________________
_
http://shopping.yahoo.com.au - Father's Day Shopping
- Find the perfect gift for your Dad for Father's Day


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================