Re: [FW-1] Two IP Ranges

2006-01-17 Thread Ramki Security
Hi Saludos, You don't have to assign a secondary IP address. As long as your ISP router is forwarding the traffic for that IP range to your firewall, you can go ahead and implement static NAT (or Hide NAT) with the new IP range and it does works. Regards...Ramki Alvaro Gastambide wrote:

Re: [FW-1] Two IP Ranges

2006-01-17 Thread Alvaro Gastambide
Thnaks, but i try it without using second ip and not works, i can't add a proxy arp i have to put second ip and works but i am not sure if is stable. -- Saludos, Alvaro Gastambide - CCSA - MCSA Security Advisor www.sadvisor.com Ramki Security wrote: Hi Saludos, You don't have to

Re: [FW-1] Two IP Ranges

2006-01-17 Thread Hal Dorsman
To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: Re: [FW-1] Two IP Ranges Thnaks, but i try it without using second ip and not works, i can't add a proxy arp i have to put second ip and works but i am not sure if is stable. -- Saludos, Alvaro Gastambide - CCSA - MCSA Security

Re: [FW-1] Two IP Ranges

2006-01-17 Thread Ramakrishnan Pillai
You don't need to add proxy arp. A route for the network range from your ISP to your firewall and a NAT configuration on your firewall is enough for this to workRK [EMAIL PROTECTED] 1/17/2006 10:15:00 AM Thnaks, but i try it without using second ip and not works, i can't add a proxy

[FW-1] Two IP Ranges

2006-01-16 Thread Alvaro Gastambide
Hi, I have a Check Point R55, and i a used all ip's provides by my ISP. So my ISP give me another IP range. To can use static nat with the second range, i have to put the public ip that i use in static nat as a secondary ip of the internet interface of the check point. Is it the correct

Re: [FW-1] Two IP Ranges

2006-01-16 Thread John Sims
- From: Mailing list for discussion of Firewall-1 [mailto:[EMAIL PROTECTED] On Behalf Of Alvaro Gastambide Sent: Monday, January 16, 2006 8:47 AM To: FW-1-MAILINGLIST@AMADEUS.US.CHECKPOINT.COM Subject: [FW-1] Two IP Ranges Hi, I have a Check Point R55, and i a used all ip's provides by my ISP. So

Re: [FW-1] Two IP Ranges

2006-01-16 Thread Charalambos Klitiropoulos
If the second range is 'served' by the same link and router you already have with your ISP you do not need a secondary IP address on you firewall. Just make sure that your router forwards the second range to the external IP address of your firewall. On 16/01/06, Alvaro Gastambide [EMAIL