Thanks for the reply, Paul;
>2) I'd check the interface setups for the firewall and switch. I have had
>loads of problems with "auto-negotiation" of speed and duplex coming up
>with
>different settings. Lock them down to 100Mbs/Full-Duplex if supported.
Checked. Both sides of all three interfaces report 100/full; I'm seeing no
error counts, either. (I did have to "turn on" the full duplex in Voyager,
but we did that weeks ago, with no improvement, other than collisions=>0.)
>3) Which interface did you licence? I have seen the "error" message saying
>"Only 25 Hosts Allowed" is just info to let you know the size of your
>licence. But if you have licences the internal interface, I reckon it will
>count the external IPs as being protected.
The conf/cp.license file reports the IP of the interface designated in
conf/external.if, which is indeed the external interface (the interface with
access to lots of hosts). And this is the interface that the IP's reported
in the "too many internal hosts" are reachable over....
And so the mystery deepens!
Thanks anyway,
-frank
_________________________________________________________________________
Get Your Private, Free E-mail from MSN Hotmail at http://www.hotmail.com.
Share information about yourself, create your own public profile at
http://profiles.msn.com.
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
