|
|
|
|
|
|
|
|
 |
 |
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index] Re: [FW-1] SecureRemote with internal IP
> SecureRemote (192.168.1.x) --> (192.168.1.200) Firewall (202.175.x.200) --> > (202.175.x.201) FW-1 (10.1.1.1) ---> 10.1.1.2 Web server You will need to add a route to the FW-1 system for the 192.168.1.x network through the 202.175.x.200 firewall. If the FW-1 box does not have a route to that network, or has a default route pointing elsewhere, this will not work. The long and short of it is basically that CheckPoint is making the routing decision before it re-encapsulates the SR traffic back to the source. As a result, it is sending the SR traffic to the default gateway instead of back to the other firewall. What is even more maddening, is that a tcpdump on the traffic will show the correct destination IP address, but if you check the MAC address in the packet, you will find that it is the MAC address fo the default router. -Don ================================================= To set vacation, Out Of Office, or away messages, send an email to [email protected] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [email protected] =================================================
|
||||||||||
 |
 |
 |
 |
 |
 |
 |
 |
 |
|
