Hi all, I actually never had to do the external arp to valid address mapping. I keep things layer 3 only by having the a route for the valid IP pointing to the firewall, so there's no need for the router to do the ARP request. I guess this can be a good or a bad choice depending on your network config.
Regards. On Fri, 3 Sep 2004 12:23:14 +0200, Bertrand KLOTZ <[EMAIL PROTECTED]> wrote: > Hi > You must > - add a route from valid address to internal address > - have an entry in your FWDIR\state\local.arp file with: > valid_address external_mac_address > - reboot your FW1 > > Bertrand > > "Lopez Zambrano, David" <[EMAIL PROTECTED]> le 03-09-2004 11:15:37 > > Veuillez r�pondre � Mailing list for discussion of Firewall-1 > <[EMAIL PROTECTED]> > > Pour : [EMAIL PROTECTED] > cc : (ccc : Bertrand KLOTZ/DE3I/GFI/fr) > > Objet : [FW-1] Nat > > Hi, > I'm trying to set a simple nat on my system (WNT + CP4.1 is a little older, i > know...). but it doesn't works, what i'm doing wrong? > > I define a physical machine (ip 192.168.201.243 internal ip let's call srv1) and > on nat settings: valid ip: 195.77.175.69 (let's call this Web1), and add auto > nat-rules... > I also allow access to this ip: From 'any' To 'Web1' Service 'http' Accept, > Log: Account... > > If i try to get <http://195.77.175.69/> http://195.77.175.69/ from the outside, > there would be srv1 who answers this request or not? (well actually i get no > answer from the server) > I've tried to get directly to the internal ip and it works, but from outside > trying to access to <http://195.77/> http://195.77/.... it doesn't work... what > i am doing wrong? > > Thank you all > > David > > Atentamente, > > David L�pez > > Resp. Sistemas y Operaciones > > Anuntis S.L. > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
