| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] VPN and NAT will not work at the same time with NG FP1
- To: [email protected]
- Subject: Re: [FW-1] VPN and NAT will not work at the same time with NG FP1
- From: "Palmer, Kevin" <[email protected]>
- Date: Mon, 18 Feb 2002 13:29:41 -0500
- Comments: cc: [email protected]
- Reply-to: Mailing list for discussion of Firewall-1 <[email protected]>
- Sender: Mailing list for discussion of Firewall-1 <[email protected]>
- Thread-index: AcG4qcYgnm04Noj8TjWGx+xh4fk+FwAAET7A
- Thread-topic: Re: [FW-1] VPN and NAT will not work at the same time with NG FP1
Don,
Yes, adding a rule to the top of the NAT rulebase was the first thing I tried.
Kevin
-----Original Message-----
From: Don [mailto:[email protected]]
Sent: Monday, February 18, 2002 1:33 PM
To: [email protected]
Subject: Re: [FW-1] VPN and NAT will not work at the same time with NG
FP1
> When you are referring to a NAT'ed device in the encryption domain, does
> that include Hide NAT used to provide Internet access? The NAT issue is
> fairly important since almost all of the computers on my network are
> configured for NAT in one way or another. Almost all of the computers on
> my LAN are able to use hide NAT to access the Internet. Most of the
> servers on my network are configured to use Static NAT to provide
> services to the Internet. In order to have a server initiate a VPN
> connection, I would have to disable static NAT on the server's
> workstation object and disable hide NAT on the server's network object.
Have you disabled NAT for communications between the VPN's?
When doing a VPN between two NAT'd networks, you generally want to put a
rule at the top of your NAT rulebase which disables NAT between the two
encryption domains.
-Don
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
|
|
