I have gotten it to work either way, but CheckPoint may not support you if
you do not license the external interface.
ie- Best Practice would be to use external.
Internal is obviously easier, especially if you may change ISP's...

Thomas Poole

-----Original Message-----
From: Uy, Alex [mailto:[EMAIL PROTECTED]]
Sent: Thursday, July 06, 2000 8:52 AM
To: '"Hoang Ha" <[EMAIL PROTECTED]>@NET2000'
Cc: '[EMAIL PROTECTED]'
Subject: RE: [FW1] primary IP-address



Hoang, what happens if you license your primary and secondary firewalls with
an internal private address as oppose to a public real address?  Could this
be the reason why I'm having problems implementing VPN??

Alex Uy
Net2000 Communications, Inc.
Senior Network Administrator
Phone Number (703)654-2475


                 -----Original Message-----
                From:   "Hoang Ha" <[EMAIL PROTECTED]>@NET2000  
                Sent:   Thursday, July 06, 2000 6:41 AM
                Subject:        RE: [FW1] primary IP-address



                Hi

                the Primary IP address is the IP that will be IP address of
external
                interface. This is IP address do you license.
                For your solaris system the Primary IP address is the first
IP you
                defined while installed your system.

                Regards
                Hoang Ha



                At WEB site, http://www.phoneboy.com/fw1/,
                in QA article about licensing (Which IP Address do I
License?),
                "IP address-based licensing, you must license on the
interface which is
                up and Primary IP-address (not Sencondary)."What is the
primary IP-
                address?
                What is the definition of Primary IP-address?
                In following case, which is the Primary IP-address?
                A system (Solaris) has the three interfaces.  hme0 for
management  slot1
                 qfe0 external  slot2 qfe4 internal  slot3Please, let me
know.thanks in
                advance.
                --------Eiji Nakamura




        
============================================================================
====
                     To unsubscribe from this mailing list, please see the
instructions at
        
http://www.checkpoint.com/services/mailing.html
        
============================================================================
====


============================================================================
====
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
============================================================================
====


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to