[FW-1] Securemote from ADSL (Ethernet version).

[Paul Cluskey <Paul.Cluskey@FW1-NOSPAMSTAFF.VIRGIN.COM>]

Hi, folks,

I'm running Nokia FW-1 SP2 and have successfully got Securemote Clients (DES
- SP5) to connect using the USB version of ADSL and via Cable, but we have
one user (so far) using the Ethernet presented ADSL, i.e. he has a Router.
He has a fixed IP on the router, but its NATting his home network.

Now his home address range is 10.0.x.x/16 and the office Nat is 10.40.0.x/24

I'm presuming this is ok - any packets directed to 10.40.x.x will be
intercepted by the securemote client and directed here ?

On the logs, I can see him authenticating OK, says phase 2... But he can't
ping any internal servers - no ICMP stuff show up on the logs either, and he
can't connect to NT boxes as the other users can (\\10.40.0.5\c$ for
example). Is this a simple routing problem, or do I need to modify the
Securemote settings.

Also, I've seen people mention that you can't have 2 machines from behind
NATted ADSL using securemote at the same time. Am I better off setting up a
site-site VPN here ? Or will this give me the same problems.

Finally - IP Pool NAT wasn't enabled - will this help ?

Many thanks.

Paul.

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================