Re: [FW-1] Question on IP pools NAT

To: [email protected]

Subject: Re: [FW-1] Question on IP pools NAT

From: "Thomas B. Granier" <[email protected]>

Date: Tue, 29 Oct 2002 08:33:40 -0600

Reply-To: Mailing list for discussion of Firewall-1 <[email protected]>

Sender: Mailing list for discussion of Firewall-1 <[email protected]>

Thread-Index: AcJ/VyJxUCPatZ1pRnKen5xuZQOuggAALyVQ

Thread-Topic: Re: [FW-1] Question on IP pools NAT

Title: Message

I'm running NG FP2... this is how I did it...

First create the IP Pool...

Then open your firewall object and select the NAT tab. Select "Use IP Pool NAT for SecuRemote/SecureClient connections" and configure the IP Pool you want to use in the drop-down box.

Note that this is a global change for all SecuRemote/SecureClient connections that terminate at the specified firewall. You can't have some that NAT and others that don't to the best of my knowledge. Good luck!

T. Brian Granier - CCNA, CCSE, MCSE (NT4&W2K), MCP+I, N+, A+
Information Security Specialist
Zebec Data Systems, Inc.

-----Original Message-----
From: Mayooran Pooranachandran [mailto:[email protected]]
Sent: Tuesday, October 29, 2002 7:48 AM
To: [email protected]
Subject: Re: [FW-1] Question on IP pools NAT

Would this work with SecuRemote? If so how do I go about configuring it.

-----Original Message-----
From: Mark Ward [mailto:[email protected]]
Sent: Tuesday, October 29, 2002 4:13 AM
To: [email protected]
Subject: Re: [FW-1] Question on IP pools NAT

no it is incorrect. You can use IP Pool NAT if you wish to assign IPs to
secureclient connections on you internal subnets as well if you wish
----- Original Message -----
From: "Wen Guangcheng" <[email protected]>
To: <[email protected]>
Sent: Tuesday, October 29, 2002 8:26 AM
Subject: [FW-1] Question on IP pools NAT

> Hi Gurus,
> I am not so familiar with IP pools NAT. According to my understanding
> of it, IP pools NAT is just for correct routing of reply packets in MEP
> (Multiple Entry Points) configuration only. Therefore without MEP
configuration
> IP pools NAT is nonsense. Is my understanding correct?
> Thanks for any comment.
>
> Best regards,
>
> --Wen
>
> =================================================
> To set vacation, Out Of Office, or away messages,
> send an email to [email protected]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [email protected]
> =================================================
>

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================