Hi, I'm a network admin but new to routing and Check Point NG. Hoping someone can help give instructions for how to accomplish this: All i want to do is enable my client PC to browse the web, IM, etc. through Check Point which is installed on a multihomed 2003 box acting as a router. It is a very basic test LAN which that looks like this:
ISP (66.x.x.x) <-> D-Link Cable/DSL Router (66.x.x.x / 192.168.0.1) <-> Win 2003 w/RRAS (192.168.0.234 / 10.0.0.234) <-> Client PC (10.0.0.212) uplinked directly to 2003 box on 10.x.x.x nic The 2003 box is (supposed to be) acting as a router to create a 10.x.x.x network behind the 192.168.x.x network, which then connects to the cable/DSL router (so cost is 2 hops to the ISP). Also i've already added the IPRouteEnable key to the 2003 registry but i don't really understand what the point of that was...it doesn't seem to make any difference. First of all, what ROUTE ADD command would i need to run, and in order for this config to work, would i need to add a static route on the cable/DSL router as well (which is impossible) or just the 2003 box? Also i don't understand why i get ICMP (ping reply) from the Client PC to the Internet, but IE just hangs when i try to browse. My rule already says 10xxxLAN ANY * Any Traffic * Any Accept NONE GATEWAYS * Any. What *exactly* do i need to do to get Check Point / 2003 box to pass ALL traffic (or at least HTTP, AIM, etc.) from the any host on the Client PC LAN (10.x.x.x) to the Internet? Many thanks...please be as detailed as possible in your response (e.g. click this, then this, etc.) Also, if you have any suggestions on GOOD books on Check Point NG, please pass along. The Check Point books i find in the store are horrible; all they do is repeat what you can read yourself in the Help files and tell you how to do something without explaining WHY. Thanks, Ken :-) ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
