Re: [FW-1] Linksys BEFVP41 VPN router with Firewall-1 v4.1

["McDuff, Malcolm" <Malcolm.McDuff@FW1-NOSPAMINTERIORHEALTH.CA>]

Title: RE: [FW-1] Linksys BEFVP41 VPN router with Firewall-1 v4.1

Hi Sean,

I have 1 remote site using the BEFVP41.  The problem with the encryption domains is that the Linksys allows you to define only one network as the remote encryption domain. It didn't work at first with our firewall, which had a group of mulitple subnets as its encryption domain.  However because our internal uses an entire private address class I was able to simplify our encryption domain to the entire private address range (10.0.0.0/8) and get the linksys box to connect.

I have subsequently added different items to the encryption domain, and that has not negatively impacted the linksys site, as long as the 10.0.0.0/8 network is part of the firewall's encryption domain group.

My guess is that if your internal network is not contiguous you would have to define each subnet as a separate site on the linksys box, which could end up being a pain.

Malcolm McDuff

-----Original Message-----
From: Sean Donaghey/HDGH [mailto:SDonaghey@HDGH.ORG]
Sent: Monday, June 10, 2002 7:56 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] Linksys BEFVP41 VPN router with Firewall-1 v4.1

Does the Linksys BEFVP41 VPN 4-port router work with FW-1 v4.1?

Will this product work with a firewall that has multiple networks in the
encryption domain.  I saw a post in the archives, about a person who said
that the BEFVP41 box cannot handle this properly, that you would have to
create a separate connection document in the router, for each different
network you need to access.

Thanks,

Sean P. Donaghey
Sr. Technical Analyst
Hôtel-Dieu Grace Hospital
Windsor, Ontario Canada

Tel:Ext. 3717
Fax:
Email: sdonaghey@hdgh.org

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================