Any assistance would be great here: Scenario: External Remote Access Clients connect to Internal network with Microsoft's VPN. The VPN Server is on the DMZ and the Remote access Clients receive IP addresses from DHCP for the Internal Network. DMZ Network 172.16.0.x Subnet 255.255.255.0 Internal Network 10.1.x.x Subnet 255.255.0.0
Remote access clients receive IP addresses in the 10.1.9.x Range Everything works great, except accessing devices in the DMZ. I can access all devices in the internal network via Remote Access. I can access the Internet back out once connected to the MS-VPN Server (Checkpoint routes this traffic through the DMZ interface) I have tried all different types of rules: Network to Network, Device to Device, NAT Rules, etc. etc. Here is the where the pain starts. I need to be able to remotely access devices for administration that are on the DMZ once I have connected to the VPN. When I am connected to the VPN and I have my 10.1.9.x IP address, I can ping and access anything on the 10.1.x.x network. I can ping the VPN server at its 172.16.0.x address. I can ping from devices in the DMZ and get replies from the Remote Access Client at its 10.1.9.x address. However, I can not ping, traceroute, connect or even communicate from the 10.1.9.x address I have with any device on the DMZ other than the actual VPN server. I have address spoofing configured properly, otherwise I would not be able to go out to the internet once I am on the internal network. I am stumped... Help would be appreciated. Software Versions: Checkpoint NG - FP3 (on Win2K Server) MS-VPN (Win2K Server) Remote Access Clients (Win2K Pro) All connections are using Broadband access of some sort, nothing is dial-up. Thanks in advance. -T ---------------------------------------------------------------------------- Troy E. Pressley Senior Systems Engineer AdvanTech Solutions <http://www.advantechsolutions.com> 1410 N. Westshore Blvd. Suite 600 Tampa, FL 33607 813.207.8654 ---------------------------------------------------------------------------- "There is no traffic jam, on the Extra Mile" ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
