I agree with Robert. It sounds as though the arp or the route is messed up.
-----Original Message-----
From: Robert MacDonald [mailto:[EMAIL PROTECTED]]
Sent: Monday, August 28, 2000 8:15 AM
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Subject: Re: [FW1] NAT/routing problem
Peter,
My suspicion is an ARP problem. Have you added
the required ARP entry to local.arp? if so, send back
the output to 'arp -a' and 'netstat -rn'.
Robert
- -
Robert P. MacDonald, Network Engineer
e-Business Infrastructure
G o r d o n F o o d S e r v i c e
Voice: +1.616.261.7987 email: [EMAIL PROTECTED]
>>> Peter Nguyen <[EMAIL PROTECTED]> 8/25/00 5:38:46 PM >>>
>
>
>I posted this on newsgroup for help. Anyone have ideas what I can try
next?
>
>
>Here is our basic FW-1 ver 4.0 NT4 layout with 4 NICs
>
>
> Internet
>
> 70.70.100.0
> |70.70.100.11
> |
>External Customer
>10.10.10.0 --------10.10.10.11--[[FW-1] --10.2.2.8 ----------------10.2.0.0
> Intranet
> |
> | 172.25.220.11
> |
> 172.25.220.0
>
> DMZ
>
>
>Our Intranet Users are on Hide NAT 10.2.0.0 network to the Internet, All is
>OK.
>
>We have a host on Intranet at IP 10.2.50.220 Static NAT to External
Customer
>10.10.10.25
>This particular host when set to this IP under the Static NAT rule cannot
>get to internet via browser, however if I change to any other IP on
>10.2.x.x, then they can get to the Internet via browser fine. However, I
>need to set this host to this static NAT so that the External customer can
>get to them though the FW. What am I missing? Logging does not show any
>dropped.
>
>Thanks,
>Peter
============================================================================
====
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
============================================================================
====
================================================================================
To unsubscribe from this mailing list, please see the instructions at
http://www.checkpoint.com/services/mailing.html
================================================================================
