| |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [FW1] Windows 2000
It's true you don't have a checkbox to enable IP forwarding in Windows
2000; you have to enable it in the registry :
To enable TCP/IP forwarding:
1. Use Registry Editor (Regedt32.exe) to view the following registry key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters
2. Modify the following registry value:
Value Name: IPEnableRouter
Value type: REG_DWORD
Value Data: 1
NOTE: A value of 1 enables TCP/IP forwarding for all network connections
installed and used by this computer.
You need at least SP2 build 41719 under Win2K.
It's not necessary to enable RRAS, because this is for the more advanced
functions, like static or hiding NAT under Win2K, and you want the
Checkpoint-software taking care of this, not Win2K.
Haven't found a document yet on hardening Win2K , though ...
------------------------------------------------------------------------------------------------------
Philippe Verdonck
Sr System Engineer
Erudict Antwerpen NV
Desguinlei 250
B-2018 Antwerp
Belgium
------------------------------------------------------------------------------------------------------
"Gino Guidi (SD)" <[email protected]>
Sent by: To: "'[email protected]'"
[email protected] <[email protected]>
kpoint.com cc:
Subject: RE: [FW1] Windows 2000
31/01/01 16:42
Routing in Windows 2000 is much more complex than just enabling IP
forwarding. I don't even think there is an IP forwarding checkbox. In
order to get Windows 2000 to route you have to configure the machine as a
router using The Routing and Remote Access Service. The Management
Interface is just another SNAP-IN that you can add to the Microsoft
Management Console(MMC). If you need any more help with the Windows 2000
routing setup you can e-mail me directly.
__________________________________
Gino Pietro Guidi
Network Engineer
@The Costar Group/COMPS
[email protected] Message-----
From: Mark Squire [mailto:[email protected]]
Sent: Thursday, January 25, 2001 9:06 AM
To: 'Nate Roberts'; '[email protected]'
Subject: RE: [FW1] Windows 2000
I don't know of any docs, but did you get the latest version of FW1 from
Checkpoint? You have to download it. Go to:
www.checkpoint.com/download
there you can choose what versions of things you want. Be sure you have a
web support username and password.
Once you have installed FW-1 you will need to enable IP forwarding. I
can't remember exactly how to do that in 2000, but it is in the routing
section. I think Win2000 can actually act as a router????!!!! Don't
quote me on that though. Other than that I don't remember any difference
between installing it on 2000 and installing it on NT.
C:\Mark
> -----Original Message-----
> From: Nate Roberts [mailto:[email protected]]
> Sent: Thursday, January 25, 2001 8:49 AM
> To: '[email protected]'
> Subject: [FW1] Windows 2000
>
>
>
> Does any one know of the procedures to install VPN-1 Gateway
> 4.1 on a W2K
> server? I can't seem to find anything in the Kb on the
> subject. Thanks
>
> -Nate
>
>
>
> ==============================================================
> ==================
> To unsubscribe from this mailing list, please see the
> instructions at
> http://www.checkpoint.com/services/mailing.html
> ==============================================================
> ==================
>
__________________________________________________
The information in this Internet e-mail is confidential and may be legally
privileged. It is intended solely for the addressee.
Access to this Internet e-mail by anyone else is unauthorized.
If you are not the intended recipient, any disclosure, copying,
distribution or any action taken or omitted to be taken in reliance on it,
is prohibited and may be unlawful. When addressed to our clients any
opinions or advice contained in this Internet e-mail are subject to the
terms and conditions expressed in any applicable governing LCI Technology
Group terms of business or client engagement letter.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
|
|
