[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: [FW-1] Traffic between subnets - problem
You need to use specific NAT rules. If you use the NAT option on the Object
you get NAT
on regardless of the destination, Internet or DMZ, like is your problem.
To solve this:
1 - Remove the NAT configuration on the objects from the internal network.
2 - Add a NAT rule from the internal network to the Internet on the NAT
rule base.
That way the traffic from the internal network to the dmz will not be
Nated.
To qualify the Internet on a Nat Rule use a group called Known, where you
put all your internal
and DMZ networks. Negate this group on the Nat rule on the destination
field.
Great, thanks!
I'm only having a small problem now..
On the Address Translation screen, under all the automatically generated
rules, I tried several things such as:
Source
DMZ -> Known (Group with INT and DMZ) -> Any
Destination
Original -> Original -> Original
I tried to negate the "Known" group, but "Negate" wasn't an option.
I also have INT-range and DMZ-range.. am I editing the wrong objects?
I think I vaguely understand this a bit more now.. I can get one or the
other working, not both. :)
Thanks for your help!
-Jonathan
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================
