[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] Not able to ping from FW to either way
> I am new to Checkpoint FW, so kindly bear with me and guide me urgently.. > Problem: > > 1) I have two ethernet cards on my FW machine.One with Valid Internet IP and > other LAN IP (192.168.1.1), I have all the real IPs in my network. > > ISP------------Router-------Hubs----------------(E0)--FW > machine--(E1)------------------------------HUB-----------------192.168.1.134 > | (Valid IP-206.x.y.z, > (LAN IP-192.168.1.1 > | > 255.255.255.0) ,255.255.255.0) > | > | > | > Workstations(with Valid IPs) > > I am not able to ping from 192.168.1.1 to 192.168.1.134 and vice > versa?? Cards are responding to self ping i.e. if I ping 192.168.1.1or > 192.168.1.134 from the same > machine, I get replies from the ehernet cards !! What is your firewall rulset? Unless you have explicitly allowed ICMP to and from the firewall, all such traffic will be dropped. > 2) I am also not able to ping my router's valid Internet IP from my > FW's valid Internet IP although I have added the routes. I want to do > Static NAT, I did all the steps, but when I am not able to ping the two > machines, I guess NATing won't work. Your network diagram is, to say the least, confusing. Does it look something like this: Host -- Firewall -- Router -- Internet Host IP: 192.168.1.1.34 Firewall Internal: 192.168.1.1 Firewall External: 206.2.3.2/24 (Just an example) Router Internal: 206.2.3.1/24 (Just an example) Router external: a.b.c.d/30 The router should have a default route through its serial interface. The firewall should have a default route through 206.2.3.1. The hosts on the internal network should have a default route through 192.168.1.1. You should be running hide-mode NAT on the the firewall for the internal network. Unless you have a specific rule on your firewall, you will not be able to ping to or from the firewall while it is running. -Don ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|