also check that you don't prohibit that traffic with your anti-spoofing rules, I made that mistake a few days ago ;-)
 
Patrick

>>> "Jeff Richmond" <[EMAIL PROTECTED]> 03/04/01 21:38 >>>

You need to route to the next hop, not to the IP address of the host directly. The
NAT translation on the firewall provides the appropriate IP mappings, so you'll just
need to add the following route statement:

route add 208.x.x.x 10.10.10.1

Good luck.

-Jeff

CGI wrote:

> I have a configuration:
>
> internet
>      |
> sun firewall box 10.10.10.18
>      |
> router 10.10.10.1
>      |
> Router 10.10.20.1
>      |
> host 10.10.20.3
>
> When I add a NAT
> Route add 208.x.x.x 10.10.20.3 I receive a error
> message:
> Network is unreachable.
> I can not NAT a computer which is in the 2nd hup??
>
> Thanks
>
> _______________________________________________________
> Do You Yahoo!?
> Get your free @yahoo.ca address at http://mail.yahoo.ca
>
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================

Reply via email to