Re: [FW-1] Which side should I put FW-1 licence? Please help!

[Lars Troen <lars.troen@FW1-NOSPAMPROXYCOM.NO>]

Not exactly correct..
The license counts hosts on the interfaces not defined in external.if. The
interface defined in external.if may not be the same as the licensed
interface. However if you want to use FWZ or SKIP vpn functionality, I think
these use the licensed network interface for their operation and must have a
public address in order to work.

Lars

> -----Original Message-----
> From: Mailing list for discussion of Firewall-1
> [mailto:FW-1-MAILINGLIST@beethoven.us.checkpoint.com]On Behalf Of Reed
> Mohn, Anders
> Sent: Wednesday, February 13, 2002 11:19
> To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> Subject: Re: [FW-1] Which side should I put FW-1 licence? Please help!
>
>
> The licensed IP is not used to calculate the number
> of licensed hosts. It's the interface you designate
> as external that counts. Anything that's _not_ on that
> interface will be counted as protected.
>
> License whichever side you want, but check the FW-list archives,
> and you will see that there might, in some cases, be unwanted
> side effects of having the internal interface licensed.
> Usually, it's no problem, though.
>
> Cheers,
> Anders :)
>
>
>
> > -----Original Message-----
> > From: liu [mailto:liu@DWANGO.CO.JP]
> > Sent: 13. februar 2002 01:41
> > To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
> > Subject: [FW-1] Which side should I put FW-1 licence? Please help!
> >
> >
> > Hi everyone
> >
> > I have designed a network.All the ip I got are from 201.231.99.0 to
> > 201.231.99.127. All the ip address can be routed in the internet.
> >
> >
> >                       201.231.99.126       210.231.99.1/26
> > internet->router<------------------->firewall<-------------->i
> > nternal-------
> >                                    (A)     (B)
> >
> > I create 2 subnets one for internal side and one for outside between
> > firewall and router.
> >
> > Because the licence is of 50 hosts that can be protected,the internal
> > side use the ip from 210.224.18.2 to 210.224.18.62 with mask
> > length 26.
> > 210.231.99.1 is the ip that printed with the licence of FW-1.
> >
> > But I found it in internet that it is common to set the ip with the
> > licence on the external side that is point A to calculate the
> > protected
> > hosts number.
> >
> > The problem is I have no chance to change the network design because
> > some hosts have been set up with DNS , MAIL and other application by
> > other people aleady.Is there any licence problem if I set the
> > ip in the
> > internal side and how to set the "external.if" file. My OS is Nokia
> > IPOSv4.3.
> >
> > Thanks in advance
> >
> > =================================================
> > To set vacation, Out Of Office, or away messages,
> > send an email to LISTSERV@lists.us.checkpoint.com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > fw-1-owner@ts.checkpoint.com
> > =================================================
> >
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to LISTSERV@lists.us.checkpoint.com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner@ts.checkpoint.com
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================