Security

Ask something
Discussion Locked

Firewall-1 will not route.

0 helpful
10 replies

by jp. 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

What am I doing wrong (and before the UNIX people tell me that the problem is I am using NT...I have no choice)

I am having routing issues with Firewall-1 and I have traced it back to the NT build. It seems the IP forwarding is not working. I am at a loss as to why.

Any one have any ideas?

10 replies

by timthetoolman

Hi,

Can you tell us a little more?

Like... will the machine act as a router without the firewall software involved? or haven't you been able to try that?

I ask that because although you've said you've traced it back to NT, you also mention that its an issue with Firewall-1...??

I assume you're at SP6a for NT and the latest SP for Firewall-1?

If you're not, you could *try* the beta version of Firewall-1. I would only prove the point with it, though. Not go to production with it.
Let us know what you've tried so far and what the results have been.

Cheers,
Tim.

by isys

From the Command Prompt use PING and TRACERT to confirm or refute your suspicions. If you can ping the gateways and traceroute through them, and each is set up to do IP Forwarding, you likely have a configuration problem with your Firewall-1. As Isaid in your other posting, make sure each NIC has a gateway. Do you have the RIP for Internet Protocol service installed? It is done on the services tab of Network properties.

by jp.

When I just have NT installed, I can not use the NT box as a router, it just will not forward the packets to the default gateway.

When I check the routing table it all looks correct.

The reason that this is a problem is with Firewall-1, is that without this routing working I can not create static maps.

Yep NT is on SP6a.

When I try a tracert, it gets to the NT box (without Firewall-1 already installed) and stops there. I can ping both sides sides fine from the NT box itself.

HELP

by mshavrov

If you are able to install everything from the scratch, use following method (it's from Firewall Certification questions).

1. Install NT, turn on "IP Forwarding" in TCP/IP settings. Check, that your routing is working correctly. NT should work as router without any problems (if all addresses are configured correctly)

2. Install Checkpoint Firewall. In firewall settings configure "control IP forwarding". When this checkbox is checked, firewall should turn off NT "IP Forwarding" and take care about all packets routing.

Good luck.

by jp.

The problem I am having is with step one of that procedure. It will not act like a router and I am enabling IP forwarding....any idea

by jp.

Thank you for your help.

I found what the problem was and I am embarrassed to say. In my panic with the NT box I forgot to add the route back on the Routers.

Simple, easy, stupid mistake...all my trade marks.
Thanks anyway for your suggestion.

This discussion is closed to new replies.