NETWORK PRESENCE ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT
 


Search
display results
words begin  exact words  any words part 

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [FW-1] Question about Rainwall



Hi:

To a certain extent, it depends on how your network is designed, and how
you implement NAT on the firewall. YMMV.

We use dynamic NAT to mask the IP addresses of the internal network hosts.
There is a VIP on the secure and non-secure interfaces of the firewall. All
outbound traffic is NAT'd to the VIP on the non-secure interface. The
routers on the secure network default all traffic to the VIP on the secure
network interface. The VIPs will fail over to the other node in the cluster
in the event that one fails.

Regards.

Bob Webber
AT&T Global Network Services
Tel:Fax:Notes: Bob Webber/Markham/IBM@IBMCA
Internet: [email protected]

"Logic merely enables one to be wrong with authority" - Doctor Who


Jörg Oertel <[email protected]>@beethoven.us.checkpoint.com> on 01/31/2002
08:31:51 AM

Please respond to Mailing list for discussion of Firewall-1
      <[email protected]>

Sent by:  Mailing list for discussion of Firewall-1
      <[email protected]>


To:   [email protected]
cc:
Subject:  [FW-1] Question about Rainwall



You Rainwall guys out there can propably answer my question.
How do you implement the routing from your protected LAN to the world? I
mean, usually you have a default gateway configured at each
workstation/PC. But in a Rainwall HA configuration you've got a bunch of
IP addresses for the firewalls. How does it work?

Any comments, at which technical or abstract level ever, are welcome.

Kind regards/Mit freundlichen Grüßen
Jörg Oertel

--
Joerg Oertel            Tel:02225/8820
MOSAIC SOFTWARE AG      Fax:02225/882201
Feldstraße 8            e-mail:[email protected]
53340 Meckenheim        www.mosaic-ag.com

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [email protected]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[email protected]
=================================================



 
----------------------------------

ABOUT SERVICES PRODUCTS TRAINING CONTACT US SEARCH SUPPORT SITE MAP LEGAL
   All contents © 2004 Network Presence, LLC. All rights reserved.