[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] DHCP issue with checkpoint
DHCP clients send packet to 0.0.0.0 and 255.255.255.255 and want to IP and other things. If client and server are not in the same subnet, Server will not receive these packets. In order to forward dhcp request packets coming to 0.0.0.0 and 255.255.255.255, you may use dhcp/boot relay agent on the firewall or any machine on client site. DHCP realy agent maps DHCP server and send these traffic to DHCP server. Also if you are using Anti spoofing on firewall, you should add these IP's in to AntiSpoofing group. BR -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[email protected]]On Behalf Of Imran Obaidullah M Sent: 06 Aðustos 2003 Çarþamba 16:51 To: [email protected] Subject: [FW-1] DHCP issue with checkpoint Dear frds, During my lab setup i am having the prob which i am unable to troubleshoot. I have a DHCP client on Router (Cisco product) and DHCP server (Cisco Product).I am keeping DHCP client outside the firwall while DHCP server is inside the firewall.The rule base is any nay any allports allow.I have created all ports group which contains all the services. DHCP server client uses follwoing ports. Time of day, bootp,tftp. I have seen and confirmed twice that above ports are included in the service group. I am still not able to establish the communication between DHCP client and the DHCP server across the firewall. I can confirm that when modem comes online right now modems are stuck in the initd mode. PLease let me know if u have any solution. I am using ASF 5105 2.2.1.0a FP3. Note I am configuring DHCP server address in the IP helper. Regards vj ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] ================================================= *** Anti Virus Software scanned this email for malicious content *** *** IMPORTANT: Do not open attachments from unrecognized senders *** ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|