You can use the new IP range in your NAT configuration as long as the
ISP router is forwarding your all traffic to this IP to your firewall
interface. It not not required to have the new IP range attached to any
firewall interface.
You may have to create an OS route to point the new IP range to the
appropriate internal gateway to where the destination machines are located.
Ramki
CCNA, CCSE-NGAI
Sascha Picchiantano wrote:
Hi there,
quick question here. We just received a new subnet from our ISP and want to
use this for static NAT mappings only. Do we need to bind these addresses
(or one of them) to any of the firewalls interfaces to tell the OS it's part
of this subnet, or can we simply use the addresses in NAT configuration and
VPN-1 will do the rest (I am thinking Proxy ARP here or something)?
Thanks
Sascha
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
