Hi Fadjar,

> Please see the arp of your PC (router) that connect to Internet.
> Is the Ip address that you want (192.168.1.140 have MAC address of the
> External interface of the firewall.

I knew that :-) but...

> In Cisco you must in enable mode and type sho arp.
> Your 172.16.0.2 can not "see' from the Internet, the packet 
> will pass to the right MAC address and the MAC address must be the
external 
> Interface of the firewall

... I have no access to the router. Therefore you are right: static arp
should be set on the external interface.

But what I did was:

arp -s <IP> <MAC> -i eth2

This is not right - thanx to Frank who gave me the hint!!!!!

arp -s <IP> <MAC> -i eth2 pub

YES... this little pub (I did�t knew about) was the problem. Now everything
is working fine and I�m looking forward to install FW-1 soon to see if it
runs that fast on Linux.

Regards,

Marco


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to