I believe that if you don't wish to break the name matching the actual interface name in the objects topology tab, then VLANs may be the only option available to you. I too wish to achieve what you describe, however VLAN tagging is not an option available to me, I have therefore had to name the secondary interface with a dummy interface name in firewall-1. This has produced some warning messages regarding the interface not existing from the fw-1 kernel, but the box appears to successfully receive traffic from the additional network range, it is accepted or rejected normally by Firewall-1.
I'd be interested to hear if anyone has an alternate solution to this. Jag -----Original Message----- From: Chris Hoff [mailto:[EMAIL PROTECTED] Sent: 16 February 2004 16:06 To: [EMAIL PROTECTED] Subject: Re: [FW-1] 2 IP's on one physical interface I have a need to do the same thing, and I have overcome this obstacle by using VLANs. The Nokia devices are VLAN aware and can be used in VLAN tagging environments. The VLAN environment is setup within the physical interface setup screen. Hope this helps, Chris -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Brett, Gary Sent: Monday, February 16, 2004 10:29 AM To: [EMAIL PROTECTED] Subject: [FW-1] 2 IP's on one physical interface I have a nokia IP350 and NG fp3. I wish to configure an interface (physical port on firewall) with 2 IP addresses because i will be presenting data from 2 sources at the same interface (weve run out of ports you see) In voyager it seems easy enough i just added an additional IP address to the interface and it accepted it with no problems. However my problem is with NG, when i go to the topology i cant add a IP address with the same logical name, it says " the name must be unique". It is my understanding that the name on this screen MUST be exactly the same as the name of the card in the OS or all sorts of problems start to occur, If this IS the way it works then it would appear as a different interface name which would be very misleading Does any anybody know how i can overcome this problem or how i can get this working regards This electronic message contains information from Halifax Cetelem Credit Ltd which may be privileged or confidential. The information is intended to be for the use of the individual(s) or entity named above. If you are not the intended recipient be aware that any disclosure, copying, distribution or use of the contents of this information is prohibited. If you have received this electronic message in error, please notify us by telephone or email (to the numbers or address above) immediately. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= Jag Bains Network Security Engineer Boxing Orange Ltd t: 0871 871 2774 f: 0871 871 0068 [EMAIL PROTECTED] http://www.boxingorange.com/ This message (and any associated files) is intended only for the use of the individual or entity to which it is addressed and may contain information that is confidential, subject to copyright or constitutes a trade secret. If you are not the intended recipient you are hereby notified that any dissemination, copying or distribution of this message, or files associated with this message, is strictly prohibited. If you have received this message in error, please notify us immediately by replying to the message and deleting it from your computer. Messages sent to and from us may be monitored. Internet communications cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or contain viruses. Therefore, we do not accept responsibility for any errors or omissions that are present in this message, or any attachment, that have arisen as a result of e-mail transmission. If verification is required, please request a hard-copy version. Any views or opinions presented are solely those of the author and do not necessarily represent those of the company. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
