Hi Eric,
Two questions:
1. If you ssh to the Nokia box, can you ping
10.1.1.0/24 from the Nokia box?
2. Can you access the Internet from the 10.1.1.0/24
network though the Nokia box? If not you might need a
default route on the 10.2.1.20 router to the Nokia
box.
HTH,
Pete Goodridge
--- Eric Mandel <[EMAIL PROTECTED]> wrote:
>
> I have secureclient 4.1 installed & working properly
> for the primary network
> on the internal interface of FW1 4.1 SP2 on a Nokia
> 330.
>
> Internal Interf. on firewall is 10.2.1.1. When I
> ping any address from
> SecureClient on the 10.2.1.0 network i get a
> response. I am trying to setup
> another network 10.1.1.0 which has a router on the
> 10.2.1 network of
> 10.2.1.20. I have setup a static route in the Nokia
> Voyager for the
> 10.1.1.0/24 network to use GW 10.2.1.20. Internally,
> this is working
> perfectly. All the clients use the firewall
> (10.2.1.1) as their default
> gateway and when they try to ping 10.1.1.1, they are
> redirected to the
> router.
>
> However, when I try to ping 10.1.1.1 from
> SecureClient, the request times
> out. It's making it through the firewall and when I
> do a tcpdump on the
> internal int. of the firewall, it seems like it is
> just throwing the ICMP
> packet out on the 10.2.1. network without directing
> it to 10.2.1.20. Below
> are the two lines from the tcpdump. The first one
> shows the SecureClient
> (192.168.0.179) pinging an IP on the 10.2. network
> succesfully. The next
> line shows what happens when I ping 10.1.1.1. It
> appears not to be
> processing the static route.
>
> 10:07:56.500492 192.168.0.179 > 10.2.1.2: icmp: echo
> request
> 10:08:00.338750 192.168.0.179 > 10.1.1.1: icmp: echo
> request
>
> Does secureclient bypass Nokia Vayager static
> routes? If so, how would I
> accomplish what I'm trying to do?
>
>
> Thanks for any help.
>
> Eric Mandel
>
>
>
================================================================================
> To unsubscribe from this mailing list, please
> see the instructions at
>
> http://www.checkpoint.com/services/mailing.html
>
================================================================================
__________________________________________________
Do You Yahoo!?
Yahoo! Shopping - Thousands of Stores. Millions of Products.
http://shopping.yahoo.com/
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
