Are you sure that it is possible to make A talk both to B and C? I was told that VPN-1 let the client look at only one Encryption Domain and that would mean that if you want it to talk to 2 different peers it would need 2 different VPN client. Andrea Lino -----Messaggio originale----- Da: Renuka Tankhiwale [mailto:[EMAIL PROTECTED]] Inviato: mercoledì 14 febbraio 2001 2.00 A: 'Ivan Fox'; Firewall-Wizards@Nfr. Net; Firewalls@Lists. Gnac. Net; Firewall-1 Oggetto: RE: Can I setup a VPN this way? It is a bi-directional thing so there is nothing like a serial connection from A to B to C. For A to talk to C it has to be there in the VPN policy. For A to talk to B you will have to set an IPSec peer IP of B. For A to talk to C you will have to set an IPSec peer IP of C. Then on B set A and C as IPSec peers and so on for all the three and everybody can talk to everybody else. Hope this helps. -----Original Message----- From: Ivan Fox [mailto:[EMAIL PROTECTED]] Sent: Tuesday, February 13, 2001 3:28 PM To: Firewall-Wizards@Nfr. Net; Firewalls@Lists. Gnac. Net; Firewall-1 Subject: Can I setup a VPN this way? Let say three are 3 sites in serial, i.e., A --> B --> C. Each site has its own subnet and Check Point VPN-1. Can I setup a continuous VPN using Check Point VPN-1 starting from A and ending at C. Any pointers are appreciated. Ivan - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.] - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.] - [To unsubscribe, send mail to [EMAIL PROTECTED] with "unsubscribe firewalls" in the body of the message.]
