NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[FW1] SecuRemote over PPOE, Linksys Hub, and wireless network



Do you have recommendations when using SecuRemote over a 
wireless network?

One of my SecuRemote users is connected to SW Bell 
via a PPOE connection that is terminated by a linksys
hub.  He did the following to make it work.

1.	Reduce MTU size from 1500 to 1400 on the laptop.
2.	Installed latest Linksys software on the hub.

The MTU size problem was recognized after small parts
of a web page loaded correctly, but large parts did not.
SecuRemote authentication was OK.

SecuRemote works in a wired network but does not work 
in the wireless network


        SWBIS DSL ( requires PPPoE )
        Linksys BEFW11S4
                NAT Router (includes PPPoE client)
                802.11b Wireless Access Point
                Ethernet switch

        Win 2k Laptop
                Ethernet to LInksys Switch
                Wireless to Linksys access point (56 bit WAP encryption)
                Integrated V.90 win-modem

Do you have suggestions to make SecuRemote work in the
wireless home office environment?



Here is the user's analysis.


"It appears that the SecurRemote software uses DIX style TCP/IP
packets instead of 802 style packets.  If any other protocol
later encapsulates the frame, or tries to convert it to 802
format it will fail.  ( DIX has a slightly larger data section
that 802.)  The solution is to hard code the MTU.  I didn't
figure out the true limit, I just used 1400."

"It also appears that SecureRemote cannot work with 802.11b
wireless adapters.  I'm not familar with the 802.11b frame
details, but I bet it can't handle DIX.  SecurRemote is probably
only sending DIX format packets and not even listening for 802
format packets.  With it hooking into the NDIS layer, it could be
doing anything and we have no way to know.  This issue should be
raised with CheckPoint support."



greg

_______________________________________________________________
Greg Polanski                    mailto:[email protected]
ADC Telecommunications, IncMSFAX
PO Box 1cell/pager
Minneapolis, MN  [email protected]
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
After June 29, 2001
- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -
Greg Polanski                    mailto:[email protected]
ADC Telecommunications, IncMSFAX
PO Box 1cell/pager
Minneapolis, MN  [email protected]
_______________________________________________________________


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.