I'm trying to configure Fw1 NG on Win2k Adv Server
I have following configuration
1st interface IP: 62.141.108.83 Mask: 255.255.255.240 GW: 62.141.108.81
2nd interface IP: 10.10.0.11 Mask: 255.255.255.0 GW: 62.141.108.81
In FW created network INTERNAL as 10.10.0.0 mask 255.255.255.0 With Enable automatic NAT (hide)
In result i can ping any (internal/external) host from mashine with FW installed but from internal hosts i can't ping external net :( can ping only external interface (62.141.108.83)
In event log i receive message - You have licence only for 256 internal host.
-- Best regards, Дмитрий mailto:[EMAIL PROTECTED]
Hi, first of all, I think you have a problem with the license ("You have licence only for 256 internal host."). This means, that your Firewall has detected too many internal IP-Addresses. You should check the settings of your Interfaces (Internet = External) and reset the counter.
NAT should not be the problem when using automatic NAT, even on Win2k.
Maybe removing the GW of your 2nd Interface might help, just leaving it at the 1st Interface set. Sometimes I had "weird" reactions when both NICs had the Default Gateway set.
You have checked "IP Enable Router" is set to "1" in the registry of the Gateway?
Then you should have a rule accepting "ICMP echo-request" from your internal network to "Any".
Are there any entries in your Log/SmartView Tracker? You should see "Accept" or "Drop", when you have a rule logging all traffic which isn't accepted (any any any any drop log)
Hope it helps, best regards, Matthias http://www.fw-1.de/ -- AERAsec Network Services and Security GmbH Wagenberger Strasse 1 D-85662 Hohenbrunn, Germany http://www.aerasec.de
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
