Hi Peter, On Feb 11, 2004, at 12:15 AM, Peter Weyrosta wrote:
hi,
hfa01 is installed on both management and module. nat should not be the problem, since ping is no problem in both directions and tracroute shows that the connection is routed through the tunnel.
we tried two ways:
first) edgebox tries to register to private ip of management. second) static nat of management to outside. edgebox tries to register to public (nated) ip address of management.
got this 2nd way working, excluded UDP SWTP-SMS from the VPN community, nated the management, allowed UDP SWTP-SMS to the managemnet.
in both cases we see one unencrypted packet UDP SWTP-SMS passing in through the firewall. a packet trace verfies that the packet reaches the management. but no answer at all from the management can be seen in the packet trace.
regards ulli
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
