Mailing list for discussion of Firewall-1 <[email protected]> wrote on 16/01/2007 23:49:19:
Ray wrote: > I'm sorry but I don't understand this part: > > >However, > >when I try to talk to systems protected by gateway B, it fails because the > >client doesn't use the office mode address but the physical address > >supplied by the ISP router, which happens to be 172.16, and routing fails. > >If I change the IP router to supply addresses other than those used > >internally, it works fine. > > Are you talking about a MEP configuration where you are connecting to A or B > from the Internet? > > If not, how are you getting to the subnets behind B when connected to A? A > site-to-site VPN? > No we don't have a MEP configuration but yes site A and site B have a site-to-site VPN. > What do you mean by "client"? The computer connecting by remote access? How > is an ISP router supplying addresses to the remote access computer? > By the client, I meant the laptop connected via an ISP to the internet, and getting an NATed DHCP address from the ISP router. It looks like the only way forward is to upgrade to NGX, and use per-site office mode address assignment. Thanks! > Ray > > _________________________________________________________________ > The MSN Entertainment Guide to Golden Globes is here. Get all the scoop. > http://tv.msn.com/tv/globes2007/?icid=nctagline2 > > ================================================= > To set vacation, Out-Of-Office, or away messages, > send an email to [EMAIL PROTECTED] > in the BODY of the email add: > set fw-1-mailinglist nomail > ================================================= > To unsubscribe from this mailing list, > please see the instructions at > http://www.checkpoint.com/services/mailing.html > ================================================= > If you have any questions on how to change your > subscription options, email > [EMAIL PROTECTED] > ================================================= > ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
