Are all the subnets defined properly for you VPN domain? Could it be the 2 subnets you can get to fine are directly attached to the firewall, while the third is off a router (WAN)? If this is the case, you would not be able to use the "All IP addresses behind gateway based on Topology information", but would need to define a group that contains all of the subnets you want to allow access to and then set the VPN domain to be that group.
Hope this helps, Chris -----Original Message----- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of SIBEL MEREY Sent: Monday, July 26, 2004 6:14 AM To: [EMAIL PROTECTED] Subject: [FW-1] VPN Secureremote routing problem Importance: High ** High Priority ** Hello, We have got an interesting problem. We are using CP FW-1/VPN NG R55. secureremote R55 is installed for VPN users. We have formed a group, which is composed of 8 users and these users are connecting to the hosts that exist in 3 different subnets, separately. One of these 8 users can connect 2 hosts but he/she cannot connect the other one. When running traceroute command in the direction of this host, connection goes no further than ISP router and "destination net unreachable" message returns. Connection from another machine can be done with free of problems with the same user account and same ISP. Is there anybody who has an opinion about this matter? Thanks Sibel Merey Telekomünikasyon Mühendisi Bilgisayar Destek Hizmetleri Müdürlüğü Tel : 0 212 350 30 42 Fax : 0 212 350 40 42 ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] ================================================= ================================================= To set vacation, Out-Of-Office, or away messages, send an email to [EMAIL PROTECTED] in the BODY of the email add: set fw-1-mailinglist nomail ================================================= To unsubscribe from this mailing list, please see the instructions at http://www.checkpoint.com/services/mailing.html ================================================= If you have any questions on how to change your subscription options, email [EMAIL PROTECTED] =================================================
