General discussion

Locked

Routing between FW & internal network

By youtheman ·
I have Checkpoint FW running on NT 4.0 connected to an Internal NT router with three NICs. Added a NAT rule on FW to interpret Valid external address to Internal address. Also manually added routes using the Route command on each box. When I tracert from the FW it displays the gateway on the Internal router and then no response.
Need help in setting up correct routes?

This conversation is currently closed to new comments.

3 total posts (Page 1 of 1)  
| Thread display: Collapse - | Expand +

All Comments

Collapse -

Routing between FW & internal network

by rguaraldo In reply to Routing between FW & inte ...

There's really not enough information to give you a specific answer. I would need some example data. But let's review a couple of things.

Your issue may not be anything to do with the firewall. In fact, you might stop the firewall service completely and make sure that IP routing is working properly. Make sure that IP forwarding is turned on on both the firewall and the NT router.

Your description implies that you have three subnets.
A - The subnet between the FW and the NT box.B - One of the subnets off the NT box.
C - the other subnet off the NT box.

Machines on C should have their default gateway set to the IP address of the NT router NIC on C.

Machines on B should have their default gateway set to the IP address of the NT router NIC on B.

The NT router should have one default gateway, and that should be the IP address of the internal NIC on the FW. All machines on A should have their default gateway set to the IP address of the NT router NIC on A.At this point, with the firewall service stopped you should have full routing on the internal subnets. If you can't ping and trace around the internal subnets something is wrong with your configuration, and there's no sense in even trying the firewall. Once you have this working, then you can restart the firewall and move to the specific NAT routing.

Next for the NAT routing, and here we're talking static NAT not hide NAT.

For machines on A that are NATed to a valid outside address, add a route on the firewall from the valid address to that internal address on subnet A.

For machines on B that are NATed to a valid outside address, add a route on the firewall from the valid address to the NT router NIC on subnet A.

For machines on C that are NATed to a valid outside address, add a route on the firewall from the valid address to the NT router NIC on subnet A.

Let me know... (Good luck)

Collapse -

Routing between FW & internal network

by youtheman In reply to Routing between FW & inte ...

Poster rated this answer

Collapse -

Routing between FW & internal network

by youtheman In reply to Routing between FW & inte ...

This question was closed by the author

Back to Windows Forum
3 total posts (Page 1 of 1)  

Related Discussions

Related Forums