Thank you so much for the help Reinhard, Nicolas and Damon.  I think I using Voyager 
to add the new IP address to the interface worked.  I am going to make the manual 
proxy-arp and things should be working. I'll post more results after I complete this 
change.  I am running a VRRP cluster of IP440's so I'm thinking I'll have to create a 
new virtual IP for the new addresses too.   I'm running VPN-1/Firewall-1 NG FP3 w/HF2.

Hopefully I'll be upgrading to NG AI spring of next year.


-----Original Message-----
From: Reinhard Stich [mailto:[EMAIL PROTECTED]
Sent: Monday, December 08, 2003 10:22 AM
To: [EMAIL PROTECTED]
Subject: [FW-1] AW: [FW-1] Adding new network segment to the same NIC Nokia IP440

alfred,

in ipso it is possible to define more than one IP-address to one interface. but there 
is no need for that in your case:

I guess you need these new IP-addresses only for NAT (static or hide) - so all you 
have to do is to define you network- or host-obects and define the NAT with the new 
ip-address.

if you habe automatic-ARP enabled that's all and it should work, if you have 
automatic-ARP disabled you have to define manual-proxy-ARP in ipso - with the 
mac-address of the external interface (as you have defined it now).

cheers
reinhard

        -----Urspr�ngliche Nachricht-----
        Von: NG, Alfred [mailto:[EMAIL PROTECTED]
        Gesendet: Mo 08.12.2003 17:04
        An: [EMAIL PROTECTED]
        Cc:
        Betreff: [FW-1] Adding new network segment to the same NIC Nokia IP440



        Hi everyone,

        Consider me a Unix newbie but here is what I am trying to do.
        Our ISP assigned static IP addresses have all been used.  I have
        requested more IP addresses and they have provided me with more
        addresses but on their on-site router they were unable to just add more
        addresses to the existing subnet so they assigned me a second subnet of
        IP addresses.  I know that under unix you can alias another IP address
        to the same network interface.  Is this possible under the Nokia IPSO?
        I am trying not to use a second physical network card in order to
        utilize the new second subnet.

        Thx for all your help.

        Cheers,

        >Alfred Ng
        >Information Management Technology
        >Alberta Pensions Administration
        >3rd Flr, Park Plaza, 10611 - 98 Ave
        >Tel: (780)427-1386 Fax: (780)425-6245
        >E-Mail: [EMAIL PROTECTED]
        >Web site: www.apaco.ab.ca


        NOTE: THIS MESSAGE IS INTENDED ONLY FOR THE ADDRESSEE, IT MAY CONTAIN 
PRIVILEGED OR CONFIDENTIAL INFORMATION.
        If you are not the intended recipient of this message, you should not: read 
it, distribute it, copy it or take any action in reliance on the content of this 
communication. If you have received this communication in error, please notify us at 
once by reply E-mail, then permanently delete the original, your reply and destroy any 
copy or printout.

        =================================================
        To set vacation, Out-Of-Office, or away messages,
        send an email to [EMAIL PROTECTED]
        in the BODY of the email add:
        set fw-1-mailinglist nomail
        =================================================
        To unsubscribe from this mailing list,
        please see the instructions at
        http://www.checkpoint.com/services/mailing.html
        =================================================
        If you have any questions on how to change your
        subscription options, email
        [EMAIL PROTECTED]
        =================================================



=================================================
To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email [EMAIL 
PROTECTED] =================================================
NOTE: THIS MESSAGE IS INTENDED ONLY FOR THE ADDRESSEE, IT MAY CONTAIN PRIVILEGED OR 
CONFIDENTIAL INFORMATION.
If you are not the intended recipient of this message, you should not: read it, 
distribute it, copy it or take any action in reliance on the content of this 
communication. If you have received this communication in error, please notify us at 
once by reply E-mail, then permanently delete the original, your reply and destroy any 
copy or printout.

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to