At 11:56 25.04.2002 +0100, you wrote:

>Hello All.
>
>I have a strange problem, I am running FW-1 on a Nokia platform (IP650),
>currently I have an internal address range (192.168.0.0) and an external
>address range (a.b.c.d)
>
>The problem I have is that NAT'ing 192.168.0.5 to a.b.c.6 (a.b.c.d range
>netmask 255.255.255.248 192 range mask 255.255.0.0)I cannot then get
>a.b.c.5 to talk to the external ip of a.b.c.6 or vice versa (a.b.c.6
>talking to a.b.c.5) although they will both talk to a.b.c.112. It appears
>that the NAT will not talk to any Static Address within its own Network
>segment.

do you have arp-proxy eintries for these IP-addresses (a.b.c.6) on your
nokia-box?

what do you see in the fw1-logs? what do you see with a tcpdump in the
external net?

cheers
-reinhard


--
Reinhard Stich,   ASSIST    [EMAIL PROTECTED]
Internet Security AG, 1190 Wien, Nussdorfer Laende 29-33
Tel: +43 1 370 94 40  RS784-RIPE Fax: +43 1 370 94 40-10

=================================================
To set vacation, Out Of Office, or away messages,
send an email to [EMAIL PROTECTED]
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
[EMAIL PROTECTED]
=================================================

Reply via email to