hi,
 
if you ping the pool-NAT-IPs from the internal side - does that work? do you see the 
firewall's MAC-address in the arp-table?
 
on the firewall's internal IF do a snoop and check if you see traffic from the 
VPN-client going to the internal server. check if you see answering packets. maybe 
this is an ARP or routing-problem
 
cheers
reinhard

        -----Ursprüngliche Nachricht----- 
        Von: Mayooran Pooranachandran [mailto:[EMAIL PROTECTED]] 
        Gesendet: Sa 11.01.2003 18:26 
        An: [EMAIL PROTECTED] 
        Cc: 
        Betreff: [FW-1] SecuRemote and NG FP3
        
        

        Hi All,

        I have managed to configure CKP NG FP3 (on  Solaris 8 platform) for use with 
SecuRemote.  All licenses are installed and the configurations were done by the 
book/docs from SecureKnowledge.  Also configured the firewall to use IP POOL Nat 
(enabled this options on Global props and defined a range of IP addresses that is part 
if the internal interface of the firewall i.e.: internal int of firewall is: 
192.168.100.2 and the IP pool nat  range is 192.168.100.100-192.168.100.250).

        SecuRemote has been configured on Win2K laptop.  Topology download is 
successful.  All communication (i.e.: telnet/ftp/ping) to the firewall are successful. 
 

        When trying to connect to internal servers, the firewall logs show that the 
packet is decrypted on hme0 interface but no my traffic nor connection to the internal 
servers.  Internal servers can ping  hosts on the 192.168.100.0 segment.  There was 1 
message that was logged stating: Successfully mapped (SR client's IP address) 
(192.168.100.101). arp -a from the firewall command line does not show any arp table 
entries for the mapped IP pool address m entioned above.

        Could someone please help me out or point me in the right direction.  All your 
help will be appreciated (as the current firewall ver 4.0 with 250 user license is 
causing a lot of problems due to exceeding the number of hosts protected and slowly 
dies).

        Thank you in advance.

        

        ---------------------------

        Mayooran Pooranachandran

        Danier Leather Inc.

        Director, Network Services

        [EMAIL PROTECTED]


��oiƭ��κӟ9��q�+k���,j����jw�j)m��M!VX��ˬr���"��(�)��N
������i�lz���f��)��+-����T�{.n�+�������+&j)b�      
b��ey��筅觲��rب�ƭ��i��0��^rJh�{\�o�z��q�?����x!�iH*.���j|���-���xh�����{*.�˛���ب��m���zf���5�
        ޮ���$�����&


Reply via email to