You must first configure a DHCP/BOOTP relay on the underlying hardware platform. As these packets are also probably passed through the Checkpoint (at least with IPSO 3.6 and 3.8 and NG AI R54 and R55 this is the case) you should also introduce the DHCP packets to the firewall. Tests show that you need at least the following rules:
1) src any dst bcast4x255 service dhcp action accept 2) src dhcpserver dst myotherdhcpnetwork service dhcp, echo-request action accept 3) src myotherdhcpnetwork dst fw service dhcp action accept where the objects are as follows: bcast4x255 - host node with IP 255.255.255.255 myotherdhcpnetwork - network for your workstations, other than the one, where DHCP server resides dhcpserver - host node for your DHCP server fw - your fw gateway -tarmo- ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
