I have a VS with a single subnet and vlan tag (Routed) and a dhcp server
on a remote network on the external side of the gateway. Moving windows
clients over to the firewall causes dhcp to fail on these windows
clients. Turn off the firewall and they accept the address the server
sent them. Move them back to a non-firewall network with the firewall
turned on and they accept their address sent by the remote server.
Apples do not seem to have this problem. We have placed a sniffer on the
clients and we do see the response so the configuration is good and the
apples are working fine. So what makes windows firewall reject a dhcp
reply through a SPLAT VSX gateway and do accept it on a Cisco network
environment. Anyone else see this issue, if so how'd you fix it, this
presents a nasty issue for me, especially if I have to tell a university
employee to touch 1000's of XP firewalls to make dhcp work via the
firewall. They despise them (firewalls) in the first place.
I'm running R60 VSX on SPLAT.
Thanks,
Doug
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|