Hi,
If this subnet is only used for natting then you don't need to
configure proxy arp.
You'll only need to do this if you're using addresses on the direct
connected subnet for natting.
Just verify that you upstream router has a route for this subnet to
your firewall.
And if the traffic is comming from the internet to you external
interface there is also no need to modify the antispoofing settings on
your fw's external interface.
Kind Regards.
Robby
On 7/11/06, Sascha Picchiantano <sascha AT picchiantano DOT de> wrote:
Hi there,
quick question here. We just received a new subnet from our ISP and want to
use this for static NAT mappings only. Do we need to bind these addresses
(or one of them) to any of the firewalls interfaces to tell the OS it's part
of this subnet, or can we simply use the addresses in NAT configuration and
VPN-1 will do the rest (I am thinking Proxy ARP here or something)?
Thanks
Sascha
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
