SecureClient's Office Mode would do it. Trying to use NAT rules to fake out the distant network as having a different IP space will get messy from a name resolution standpoint, unless you're only hitting one or two hosts.
Ray
From: Robert Fowler <[EMAIL PROTECTED]> Reply-To: Mailing list for discussion of Firewall-1 <[email protected]> To: [email protected] Subject: [FW-1] secure remote host ip address same as network connecting to Date: Wed, 5 Jan 2005 20:54:33 +0000
Hi All,
I am trying to use secure remote from behind a Checkpoint firewall. The secure remote client is using a 10.1.1.1. I have enabled IKE over TCP and udp encapsulation in secure remote.
See below for network
10.1.1.1 SR--> firewall-->WWW<-- firewall <-- 10.1.1.X Network user wants to connect with
when I have noticed is that if I change to secure Remote (SR) clients IP address to a 172.16.0.1 connection works. However I do not wish to do this. So the question is how do I get arround this.
Note the secure Remote client is natted using hide mode behind its firewalls external public address
___________________________________________________________ ALL-NEW Yahoo! Messenger - all new features - even more fun! http://uk.messenger.yahoo.com
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
