[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] General Question on SecuRemote and SecureClient
The problem I am considering is not an overlap between the Home Network and the Corporate Network, The problem I am wondering about is when two remote users with the same local IP address connect to the corporate network at the same time, i.e.: Home User 1 192.168.1.100 -----| |-- Corporate Firewall --- Internal Network (192.168.100.x) Home User 2 | 192.168.1.100 -----| Will there be a problem with this connection if IP Pool NAT is not used? Shawn -----Original Message----- From: Don [mailto:[email protected]] Sent: March 11, 2002 12:04 PM To: [email protected] Subject: Re: [FW-1] General Question on SecuRemote and SecureClient > Over the weekend, I picked up for myself, a Linksis DSL router for home, and > when I was setting it up, I realized that using the defaults, as many users > would, anyone using one of these devices will be getting the same network, > and potentially the same IP address on their home system. > > What I am wondering about, is will I have any problems if two users, > establish a VPN connection to us, who are using the same internal IP Address > on their home system. By not using IP Pool NAT, the IP Address used within > the corporate network, is the same address on the home system. Will > Checkpoint correctly route the traffic to the correct Remote PC, or will I > likely run into difficulties. > > On a similar note, if I should enable IP Pool NAT to clear up the above > issue, will I need to re-deploy a USERC.C file to the remote PCs or is this > totally internal to the Firewall box. I am asking this because some of our > VPN users are remote vendors who were reluctant to use the software in the > first place, and I don't want to inconvenience them further unless I have > to. IP NAT Pool will not fix this problem. You need to use different addresses on your internal network or the home networks. -don ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|