Allow inbound IPSEC and the UDP port you set NAT traversal for.
Regards,
Seung Lim
Infrastructure Engineer
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Moon,
Curtis
Sent: Monday, January 31, 2005 10:54 AM
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: [FW-1] Nortel VPN Extranet client through FW-1(R55) to Nortel
VPN Extranet 2600
Does anyone know how to configure FW-1(R55) on Windows 2003 server and
an
Nortel VPN Extranet 2600 (Contivity) on internal network, so that a
Nortel
software clients(external) can pass through a FW-1 firewall and connect
to a
VPN Extranet 2600 (Contivity) Gateway (internal) (see schema below)?
(1)Many Nortel VPN Clients --->Internet ---> (2)FW-1 (R55) Windows2003
---->(3)Nortel Contivity Extranet 2600 Gateway
Just want the external Nortel Clients to pass through FW-1 to the Nortel
Contivity. If this can be done does it make sense? Is there an
advantage to
passing the ipsec traffic throught FW-1 or would it be the same as just
allowing the Nortel Extranet 2600 to have a public ip address and just
let
the Nortel Clients connect directly to the Extranet 2600 and then
connect it
to our internal network?
Thanks,
Curtis Moon
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
