RE: [FW1] MetaIP/Dhcp

["Larry Pingree" <larry@FW1-NOSPAMsiegeworks.com>]

Yes, if you have a router between both even microsoft will do this, but the
question did not pose that a router was in the middle.



-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Larry Pingree
Sr. Security Engineer/Check Point Instructor
CCSA, CCSE, CCSI, ICE, ICI, NSA

Website: http://www.SiegeWorks.com <http://www.siegeworks.com/>
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-


-----Original Message-----
From: Chris 'Chipper' Chiapusio [mailto:chipper@llamas.net]
Sent: Saturday, August 25, 2001 8:59 AM
To: Larry Pingree
Cc: Mauro Conosciani; fw-1-mailinglist@beethoven.us.checkpoint.com
Subject: RE: [FW1] MetaIP/Dhcp



In the MetaIP case, this is totaly do-able.  I was running 5 remote
networks, plus a local net on a pair of MetaIP DHCP server for over 2
years at my last job.

Now when you configure these remote networks in MetaIP, it does complain,
but if you disregard it, and configure ip-helper (udp-helper,
dhcp-forwarding? whatever its called on your routers) it works just dandy.

Chipper


On Thu, 23 Aug 2001, Larry Pingree wrote:

>
>This is because when using Microsoft DHCP server or Metaip the "Primary"
>interface is the only interface that can give out DHCP subnets, and can
only
>assign addresses that belong to the specific subnet the primary interface
is
>on.  The only way microsoft DHCP works is by using a seperate server that
>has its primary interface enabled with DHCP and giving out the other subnet
>as assignments.
>
>
>
>
>
>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>Larry Pingree
>Sr. Security Engineer/Check Point Instructor
>CCSA, CCSE, CCSI, ICE, ICI, NSA
>
>Website: http://www.SiegeWorks.com <http://www.siegeworks.com/>
>-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
>
>
>-----Original Message-----
>From: owner-fw-1-mailinglist@lists.us.checkpoint.com
>[mailto:owner-fw-1-mailinglist@lists.us.checkpoint.com]On Behalf Of
>Mauro Conosciani
>Sent: Tuesday, August 21, 2001 7:58 AM
>To: fw-1-mailinglist@beethoven.us.checkpoint.com
>Subject: [FW1] MetaIP/Dhcp
>
>
>
>Hi
>It looks like the metaip/dhcp works only creating a lease pool with the
same
>ip address as the metaip/dhcp server.......
>my metaip/dhcp server has the ip 10.6.xx.xx/16 (only 1 NIC)
>first leasing pool is 10.6.0.0/16 works fine
>second leasing pool 10.2.0.0/16 doesn't work the status is pending/unknown
>the clients do not get any ip at all, the router is configured with dhcp
>service on.....
>Can anyone give a clue about that 'cause I don't think metaip/dhcp works
>only in a flat network....doesn't it ?
>Ciao
>
>
>
>
>===========================================================================
=
>====
>     To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
>===========================================================================
=
>====
>
>
>
>
>===========================================================================
=====
>     To unsubscribe from this mailing list, please see the instructions at
>               http://www.checkpoint.com/services/mailing.html
>===========================================================================
=====
>

------
                    Please encrypt anything important.
PGP Key: http://wwwkeys.pgp.net:11371/pks/lookup?op=get&search=0x6CFA486D



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================