[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] [FW-1] Dual address translation, bad mac
Hi! I can not get an source and destination nat working...This is what i see in snoop: 192.168.0.31 -> 192.168.37.14 TCP D=30001 S=32851 (original packet) 192.168.101.200 -> <<public ip>> TCP D=30001 S=32851 (nated packet) So NAT rule and policy is ok. But the second paket doesn't has the correct destination mac. It is fw mac, not external router mac, which has ip 192.168.101.201. With an arp -a I see the fw knows router mac. So I think the problem is in the routing table. But I added a route to the public address through the router ip, 192.168.101.201, and still doesn't work. I've seen a similar problem in phoneboy, but it's destination is on fw network, which is not my case. Anyone knows what I'm doing wrong? TIA ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|