You should also add NAT-ed IP addresses into your encryption domain. AndrejS
-----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Allen Bass Sent: Tuesday, July 18, 2006 10:43 PM To: [email protected] Subject: Re: [FW-1] NAT Rule over IPSEC Tunnel Sean, >From what I am reading the simple way would be to on your firewall Address Translation do a manual nat. Address translation tab original Source=vendor ip coming inbound Destination=servernode (node with made up ip address vendor will target) Service=any Translated Source=original Destination=realserverip (node with real ip address of server) Service=any Basically packets from vendor sourcing from Vendor IP looking for servernode will be translated to your correct inside address. Try that Allen Source=Vendor IP coming in. Destination -----Original Message----- From: Sean Donaghey/HDGH [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 18, 2006 3:55 PM To: [email protected] Subject: [FW-1] NAT Rule over IPSEC Tunnel I have an IPSEC tunnel between us and a vendor, and the vendor needs to get to a couple of servers, but the IP's of these server conflicts with something on their end. They have asked me to NAT these servers to 2 other IP's. I have never Done this, and I am unsure on how to format the NAT rules. The IP on my internal network is 10.10.10.13, and they want it natted to 10.77.130.140. Can someone please give me an idea on how to do this. Thanks,. Sean The information contained in this e-mail message is confidential and protected by law. The information is intended only for the person or organization addressed in this e-mail. If you share or copy the information you may be breaking the law. If you have received this e-mail by mistake, please notify the sender of the e-mail by the telephone number listed on this e-mail. Please destroy the original; do not e-mail back the information or keep the original. ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
