I think you want to specify the MAC address of the NIC in the firewall which should respond "on behalf" of the IP in the file local.arp. As opposed to putting the actual MAC address of the Server NIC. Otherwise the firewall does not know on which interface to proxy arp for this server. So yes it would be a misconfig if my thoughts are accurate. Disclaimer - I have not worked with Firewall-1 since 4.0 SP7. This behaviour may have changed, although I doubt it.
Ken Claussen MCSE CCNA CCA "In Theory it should work as you describe, but the difference between theory and reality is the truth! For this we all strive" -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of dark dark Sent: Thursday, December 13, 2001 2:55 AM To: [EMAIL PROTECTED] Subject: simple question hi all, I have been trying to make static NAT with checkpoint.(in 4.1) There is a problem. I cannot work it as proxy NAT (in windows2000). I have changed local.arp table and added the ip (that I want to use) and the MAC address of my NIC. but Checkpoint doesnot responds to ARP requests. What can be the problem? Any ideas? If I add arp entry to the client manually it all works. Did I misconfigured? Thanks all. __________________________________________________ Do You Yahoo!? Check out Yahoo! Shopping and Yahoo! Auctions for all of your unique holiday gifts! Buy at http://shopping.yahoo.com or bid at http://auctions.yahoo.com _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls _______________________________________________ Firewalls mailing list [EMAIL PROTECTED] http://lists.gnac.net/mailman/listinfo/firewalls
