Michelle,
What netmask are you using?
By default, the netmask for 172.16.x.x is 255.255.0.0, which is the entire
class-B network.
If you are using class-C netmasks (255.255.255.0), then you should have the
routes that you list.
You should not need to add host routes if the network routes are correctly
set up.
I assume that the internal gateway has the correct masks and routes.
--
Timothy Frost mailto:[EMAIL PROTECTED]
EDS New Zealand Fax: +64-4-495-0473
8 Gilmer Terrace Phone: +64-4-495-0504
P O Box 3647
Wellington
New Zealand
> -----Original Message-----
> From: [EMAIL PROTECTED] [SMTP:[EMAIL PROTECTED]]
> Sent: Thursday, September 21, 2000 4:32 AM
> To: [EMAIL PROTECTED]
> Subject: [FW1] Routing & Multiple Subnets
>
>
> I have a FW1 4.0 box and I have objects defined with valid IP addresses
> and
> NAT. I can get to all of the servers on the .1 network, but can't get to
> any of the servers on the other subnets. My configuration is as follows:
>
> Internet ---- router ---- FW1 ---- 172.16.1 network ---- Internal Gateway
> (router) ---- 172.16.2 network
> 172.16.1.5
> | |
> | |
> 172.16.3 net 172.16.6 net
>
> In the routing table on the FW, the routes are as follows:
>
> Network Destination Gateway
> 172.16.1.0 172.16.1.200 (internal NIC of FW)
> 172.16.2.0 172.16.1.5 (internal gateway - router)
> 172.16.3.0 172.16.1.5 (internal gateway - router)
> 172.16.6.0 172.16.1.5 (internal gateway - router)
>
> Not only can I not get to the other subnets, when I try to add a route for
> a
> server to one of these subnets (valid IP, netmask, gateway, interface), I
> get an error message that says, "Route addition failed: 87."
>
> Any assistance would be most appreciated.
>
> Thanks, Michelle
> _____________________
> Michelle Johnston
> Network Manager, NHRA
> 2035 Financial Way
> Glendora, CA 91741
> phone: 626-914-4761 x256
> fax: 626-914-7554
> [EMAIL PROTECTED]
>
>
>
> ==========================================================================
> ======
> To unsubscribe from this mailing list, please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> ==========================================================================
> ======
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
