what version of IPSO are you running?  There was a bug in older versions
that prevented ipso from passing the vlan info on the checkpoint but it has
been resolved for a while.  Just to be clear, you created two vlans on the
physical interface and now you have two virtual interfaces that are enabled,
and active?

-Rob

----- Original Message -----
From: "Adriano Dias Leite" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, April 20, 2004 9:48 AM
Subject: [FW-1] RES: [FW-1] 2 or more networks behind one interface.


> Hi Rob,
> I've created the vlan on the ipso, but checkpoint firewall-1 wasn't able
to
> find the 2nd logical interface when i did the "get topology". Do I need
some
> kind of patch or different product so it can work?
> I have fw-1 HA license.
>
> Thank you.
>
> Adriano
>
>
> -----Mensagem original-----
> De: Rob Laidlaw [mailto:[EMAIL PROTECTED]
> Enviada em: segunda-feira, 19 de abril de 2004 18:47
> Para: [EMAIL PROTECTED]
> Assunto: Re: [FW-1] 2 or more networks behind one interface.
>
> seperate the two subnets on diferent vlans.  Setup the port that connects
> the switch and the firewall as a trunk so it will tag the traffic with the
> source vlan.  Then setup the two vlans on your firewall and give each vlan
> interface the appropriete ip for the subnet it belongs too.  FW-1 will see
> the vlan interface as seperate interfaces and you will be all set.
>
>
> ----- Original Message -----
> From: "Adriano Dias Leite" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Monday, April 19, 2004 3:27 PM
> Subject: [FW-1] 2 or more networks behind one interface.
>
>
> > Hi all,
> > I know it's a dumb question, but I will do it.. :)
> > Is there a way to set 2 ip addresses to an interface card?
> > How will the firewall work on this?
> > Let's say that I set the following IPs: 10.0.0.1 and 192.1.2.1. Then I
> > plugged this interface cable to a switch that has both subnets on it.
> >
> > How do I set the second IP into the Firewall-1? When I go to
> > "Firewall/Topology/Get topology", the second IP will not appear to me,
> > right?
> >
> > Anyway, if it's possible, will the networks be segregated?
> >
> > Thank you!
> >
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages,
> > send an email to [EMAIL PROTECTED]
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list,
> > please see the instructions at
> > http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your
> > subscription options, email
> > [EMAIL PROTECTED]
> > =================================================
> >
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to [EMAIL PROTECTED]
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> [EMAIL PROTECTED]
> =================================================
>

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to