Philippe,

Lots of questions...

What does the log tell you? On which interface does the fw claim to see
the packet - if at all?

Can you tell us what the local.arp file looked like before the upgrade? Now?
I know you said it was copied over, but how(via floppy, FTP, etc.)? Is the
name all lower case?

What does 'arp -a' show you?

When you copied the file to the new fw, did you reinstall the rulesbase &/or
restart the fw?

How about the patch to SP1, did you install that(what does fw ver -k show)?

Did you license the same IP's?

I'm assuming that you have a quad thernet NIC - whose is it? In the pre-
upgrade, did you modify the MAC addresses to be unique(you elude to
them changing)?

Have you tried to replace the white space in local.arp with tabs? I think
that notepad.exe and DOS edit convert tabs to space, so it may not matter.

This should have been the first question, but besides the FW-1 upgrade,
what else changed? Did you reinstall the NT SP?

Again, sorry for all the questions, but these are just some of what goes
through my mine after I go from good to not-so-good.

Robert

- -
Robert P. MacDonald, Network Engineer
G o r d o n   F o o d    S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]

>>> CLOUP Philippe <[EMAIL PROTECTED]> 5/31/00 1:34:56 PM >>>
>
>       I have just upgraded a firewall module from 4.0 SP2 to 4.1 SP1
>version. My firewall machine is running windows NT 4.0 SP5, and has 4
>Ethernet NICs and one Token Ring NIC.
>I need to use static NAT for incoming emails, and others connections through
>the others networks connected to the ethernet NICs.
>       The static NAT used for the Token Ring Card was woprking fine in 4.0
>SP2 (there was the good file local.arp in the good directory). Because i
>have just upgraded, all the NICs have the same MAC adresses, so by copying
>the local.arp file from the old FW 1 4.0SP2 diretory to the new one in 4.1
>SP1, it has to work !
>
>       BUT NO !!
>
>       The static NAT used with the MAC adress of the Ethernet NIC cards is
>working fine, but not for the Token Ring MAC adress card. Is it a FW1 4.1
>SP1 bug ???
>       I know that in phoneboy site, there is an issue about the same
>problem for the fw1 3.0b product. (if you search "token NAT" in the query
>entry field).
>
>       Can soemone tell me what's going wrong ?
>
>Thanks



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to