for that you'd have the next-hop router route that network to the nokia, or
if that traffic is already going to the nokia, then you don't have to worry
about the nat's at all. As long as you can get the traffic to the nokia, he
will nat it if it has a rule. The proxy arp is just to have the nokia
response for other addresses that are part of the interfaces subnet, like
when the nokia is x.x.x.2 and you want it to answer for x.x.x.3. If its a
completely different network, then just route it to the nokia and your all
set.
-Rob
----- Original Message -----
From: "Reinhard Stich" <r.stich AT INTERNET-SECURITY DOT AT>
To: <FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
Sent: Tuesday, April 27, 2004 10:11 AM
Subject: Re: [FW-1] PROXY ARP, PROBLEM...!!!
> hi,
>
> can't you configure that in the arp-settings of the nokia voyager?
>
> cheers
> reinhard
>
> At 14:28 27.04.2004, you wrote:
>
> >Hi boys...!!!
> >I?ve one question...referred to NOKIA (IPSO 3.7) and CheckPoint NG
AI_R54.
> >I want to create a PROXY ARP entry on a interface (e.g eth0), but this IP
> >belong to addresses NOT CONECTED DIRECTLY on this interface.
> >For example:
> >
> >Interface eth0: 200.50.1.2
> >Proxy ARP on this interface (eth0) but for IP: 200.0.0.1
> >
> >The problem here is that this is not supported by this version
(NG_AI_R54)
> >however is supported by 4.1 version.
> >Somebody knows about some configuration to resolve this problem, on NG
> >version?
> >You understand to me?
> >
> >Saludos,
> >
> >Mateo Cabrera - Soporte Tecnico
> >Security Advisor
> >Soluciones en seguridad informatica
> >Constituyente 1467 of. 802
> >Tel/Fax: (598 2) 4004378
> >11200 Montevideo-Uruguay
> >
> >=================================================
> >To set vacation, Out-Of-Office, or away messages,
> >send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> >in the BODY of the email add:
> >set fw-1-mailinglist nomail
> >=================================================
> >To unsubscribe from this mailing list,
> >please see the instructions at
>
><http://www.checkpoint.com/services/mailing.html>http://www.checkpoint.com/
services/mailing.html
> >
> >=================================================
> >If you have any questions on how to change your
> >subscription options, email
> >fw-1-owner AT ts.checkpoint DOT com
> >=================================================
>
> --
> Reinhard Stich ASSIST R.Stich AT internet-security DOT at
> Internet Security AG, 1150 Wien, Johnstrasse 29
> Tel: +43 1 3709440 RS784-RIPE Fax: +43 1 3709440-333
>
> =================================================
> To set vacation, Out-Of-Office, or away messages,
> send an email to LISTSERV AT amadeus.us.checkpoint DOT com
> in the BODY of the email add:
> set fw-1-mailinglist nomail
> =================================================
> To unsubscribe from this mailing list,
> please see the instructions at
> http://www.checkpoint.com/services/mailing.html
> =================================================
> If you have any questions on how to change your
> subscription options, email
> fw-1-owner AT ts.checkpoint DOT com
> =================================================
>
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
