it seems to be that your "additional ip range for natting" is not in the same range like the ip address of the firewall. If so, the box will not be able to create a proxy arp (there should be an error like "cannot created proxy arp in your application log).
You can let your ips create a host route for you which routes the 10.50.0.1 - 10.50.0.10 to the external IP of the fw 10.0.0.1 /24.
If "additional ip range for natting" is in the same range like the ip address of the firewall, try disabling automatic arp creation and create the good old local.arp file in $FWDIR/conf ...
Windows 2000 proxy arps will only show up with the firewall command fw ctl arp
Hope that helps ulli
On Feb 17, 2004, at 4:37 AM, Max Soukhomlinov wrote:
Network layout is as follows, the IP addresses used are made up for example only: [INTERNET] <-----> [FW1] <------> [e0 ROUTER e1] <---- [SERVER]
FW1 public IP is 10.0.0.1 /24 FW1 internal IP is 192.168.0.1 /24 ISP assigned us additional Public Ips to be used for static nat for internal servers: 10.50.0.1 - 10.50.0.10 Routers e0 (firewall side) is 192.168.0.2 /24 Routers e1 (Server side) is 192.168.50.2 /24 Server IP address is 192.168.50.3 /24
We are trying to do static nat of 10.50.0.1 public IP <--> 192.168.50.3.
In the tracker the packet leaves the firewall correctly NATted (checked against logged rule number and source xlated IP). The policy properties are at default to do nat at client side and auto proxy arp is ticked.
When viewing local proxy arp table, its empty.
We are running Win2K, RRAS service is not running...cant think what else
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
