[FW-1] Static NAT problems on a Win2K SP3 Server with FW-1 NG FP1

["Morrison, Gordon" <Gordon.Morrison@FW1-NOSPAMBAIN.COM>]

In order to get nat working properly on w2k and NG, I have had to:

1. set up automatic Static translation for the object(not hide, which it still defaults to even for 1-to-1 mappings)
2. add the translated IP address to the external interface of the PFM (though I am not positive that this step is required, it is still nice to have to manage external IP addresses)
3. add a static route:
        route add -p (external IP address) mask 255.255.255.255 (internal IP address or nearest router if on another subnet)
4. Place a rule allowing the type of access I want to provide.


Hope this helps.

/Gordon

=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================