Firewall-1

Re: [FW-1] Manual NAT on SPLAT

Subject: Re: [FW-1] Manual NAT on SPLAT
From: "Christian 'Rana' Schlegel" <mailinglist-chris AT GMX DOT AT>
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Date: Wed, 22 Mar 2006 09:02:50 +0100
Hi,

> Hi,

> We are having CP NGX on SPLAT & are trying to do manual NAT on
> SPLAT but the same doesnt work. We would like to know where & how do
> we configure arp entries on the firewall modules.

I can tell you about R55, bope it is similar to R60:

First you need to manipulate the file /etc/ethers:
  ext.IP     MAC-FW         pub netmask 255.255.255.255
eg.:
  1.1.1.1 00:0F:AB:22:33:44 pub netmask 255.255.255.255

Second you have to set a static route via Webinterface:
  Destination    Netmask        Gateway      Metric   interface
  1.1.1.1    255.255.255.255    192.168.1.1  0        ethx

Third define manual NAT with the Policy Editor.

HTH
Christian

=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================

<Prev in Thread] Current Thread [Next in Thread>