Thanks Craig
That works perfectly, just to let everyone know what i did.
1) added an additional IP address to the interface in voyager (easy peasy
that bit)
2) physically attached the new Network to the firewall by way of a hub
(shared with current network)
3) added a default gateway to a client (test laptop) on the new network to
point packets to the new address which i configured the port with
4) created objects in NG for test laptop and destination machine
5) set off a ping -t on the laptop and saw the packets arrive at the correct
interface card (tcpdump)
6) added a rule to allow and also a NAT rule, and BINGO !
and most importantly and may i say surprisingly, I made absolutely no
changes to any topology information in NG, the only NG stuff was adding 2
nodes and an entry in the rulebase
obviouly having 2 nets broadcsting out on 1 hub is a bit dangerous, but they
are both trusted nets. I will be purchasing a nice cisco switch and VLAN'ing
off the 2 networks so that they cant reach each other.
all in all V happy
------------------------------------
Gary,
Re your posting to Firewall-1.
If you are using the interface to pass data through then Checkpoint does
not need to list this second IP address for the interface.
We use interfaces with two addresses on here with no problems.
All I will say is ensure that anti-spoofing has this other subnet in its
allowed list.
Hope this helps
Craig Paterson
Network Analyst
HBOS Card Services
----------------------------------------
-----Original Message-----
From: Brett, Gary [mailto:[EMAIL PROTECTED]
Sent: 16 February 2004 15:29
To: [EMAIL PROTECTED]
Subject: [FW-1] 2 IP's on one physical interface
I have a nokia IP350 and NG fp3. I wish to configure an interface (physical
port on firewall) with 2 IP addresses because i will be presenting data from
2 sources at the same interface (weve run out of ports you see)
In voyager it seems easy enough i just added an additional IP address to the
interface and it accepted it with no problems. However my problem is with
NG, when i go to the topology i cant add a IP address with the same logical
name, it says " the name must be unique". It is my understanding that the
name on this screen MUST be exactly the same as the name of the card in the
OS or all sorts of problems start to occur, If this IS the way it works then
it would appear as a different interface name which would be very misleading
Does any anybody know how i can overcome this problem or how i can get this
working
regards
This electronic message contains information from Halifax Cetelem Credit Ltd
which may be privileged or confidential. The information is intended to be
for the use of the individual(s) or entity named above. If you are not the
intended recipient be aware that any disclosure, copying, distribution or
use of the contents of this information is prohibited. If you have received
this electronic message in error, please notify us by telephone or email (to
the numbers or address above) immediately.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
This electronic message contains information from Halifax Cetelem Credit Ltd
which may be privileged or confidential. The information is intended to be
for the use of the individual(s) or entity named above. If you are not the
intended recipient be aware that any disclosure, copying, distribution or
use of the contents of this information is prohibited. If you have received
this electronic message in error, please notify us by telephone or email (to
the numbers or address above) immediately.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================
