I'm trying to configure a Nokia IP120 running CP FW-1 NG FP3 to hide
outbound traffic on the server side to the IP address of the FW. In 4.1,
this meant defining a hide NAT rule with 0.0.0.0 at the target address. In
NG, I am supposed to use the "Hide behind the interface of the install on
gateway" option in the NAT tab of the gateway's properties. When I select
"add automatic translation rules" and then select this radio button, I
cannot install the policy on the gateway. I get the error during compile
"The module osl-vpn01a cannot have a NAT rule intalled on ALL. The module
cannot translate its own address." The only choice I have in the
Install-on GW pull-down menu is "* ALL"; there is no other choice. In demo
mode, the Smart dashboard shows *ALL and several other gateways in the
pull-down menu.
What am I doing wrong with my config? How do I get Hide NAT to work the
way I want?
- Rob.
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
