But you need a official IP for the Gateway when you want to route the connection via Internet. This should be the Gateway-IP in SC too.
maybe you have a netplan for this to understand better what the problem exactly is... Regards Thomas Kunz Email: mailto:[EMAIL PROTECTED] -----Ursprungliche Nachricht----- Von: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] Auftrag von Prabath Gamage Gesendet: Dienstag, 17. Februar 2004 04:24 An: [EMAIL PROTECTED] Betreff: Re: [FW-1] VPN Help Yes, connnection goes through the internet. 10.0.0.1 is assinged to the vpn gateway. (SC=smart center ? official IP= global ip representing local IP asigned to the vpn gateway ? am i correct ?) When we create a site and logon, it works fine since the ip is global. But the vpn server (vpn gateway) gives its ip (10.0.0.1) to the clien as clients remote tunnel end.This can't travel through the internet. Is there a way to assigne vpn's global represented ip (only cisco 6500 box aware this ip)to the vpn server and sent it to the client as its remote tunnel end ? Thanks and regards Prabath -----Original Message----- From: "Kunz, T" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Date: Mon, 16 Feb 2004 12:48:42 +0100 Subject: [FW-1] AW: [FW-1] AW: [FW-1] VPN Help > So the connection goes through the Internet? > > Is the Official IP marked as Gateway in SC or the 10.0.0.1? > Did you review your Routing Config? > > Thomas > > -----Ursprungliche Nachricht----- > Von: Mailing list for discussion of Firewall-1 > [mailto:[EMAIL PROTECTED] Auftrag von > Prabath Gamage > Gesendet: Montag, 16. Februar 2004 11:27 > An: [EMAIL PROTECTED] > Betreff: Re: [FW-1] AW: [FW-1] VPN Help > > > Office mode is not enabled and the natting device is 6500 box. > 10.0.0.1 is the gateway cluster (hence vpn gateway). it is the IP > assigned to the external interface of nortel box. > > regards, > > -----Original Message----- > From: "Kunz, T" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Date: Mon, 16 Feb 2004 10:44:19 +0100 > Subject: [FW-1] AW: [FW-1] VPN Help > > > Do you have 10.0.0.1 oder the natted Object in your SC-Configuration > as > > Gateway? > > > > Is Office-Mode enabled? > > Any Firewall Router-NAT between? > > > > Regards > > Thomas Kunz > > > > -----Ursprungliche Nachricht----- > > Von: Mailing list for discussion of Firewall-1 > > [mailto:[EMAIL PROTECTED] Auftrag von > Samid > > Tennakoon > > Gesendet: Montag, 16. Februar 2004 09:25 > > An: [EMAIL PROTECTED] > > Betreff: [FW-1] VPN Help > > > > > > G'day all, > > > > We are connecting secure client to a VPN gateway which has ip > 10.0.0.1 > > nattted to a global IP. Connection fails during IKE negotiation > stage. > > > > "srfw monitor" shows traffic goes to the 10.0.0.1 not to the global > IP. > > > > Any help would be highly appreciated. > > > > Regards, > > Prabath > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > > > ================================================= > > To set vacation, Out-Of-Office, or away messages, > > send an email to [EMAIL PROTECTED] > > in the BODY of the email add: > > set fw-1-mailinglist nomail > > ================================================= > > To unsubscribe from this mailing list, > > please see the instructions at > > http://www.checkpoint.com/services/mailing.html > > ================================================= > > If you have any questions on how to change your > > subscription options, email > > [EMAIL PROTECTED] > > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
