Re: [fw1-gurus] SecureClient in internet Vpn to Vpn gateway with natted address.

[Rob Hughes <rob@xxxxxxxxxxxxx>]

On Sat, 2004-12-25 at 23:07 +0100, Diego.Balgera@xxxxxxxxx wrote:
> i gurus,
> hopefully a simple question.
> 
> I have a checkpoint NGAI R55 (over Windows) with the external interface,
> which leads to internet, having a private Ip address and it is just
> behind a Nat, an Adsl router.
> I would like to establish a Vpn from a SecureClient on internet to this
> Checkpoint box.

VPNs to a NAT'ed gateway are only supported when CP is controlling all
the NAT. You can try adding a fake interface to the firewall with the
public IP, enabling dynamic interface resolution and forwarding RDP, but
it probably still won't work. Your best bet is to just plug the firewall
directly into the ADSL modem and connect directly to the firewall for
your VPN.

Rob

---------------------------------------------------------------------
FireWall-1 Gurus Mailing List (http://www.phoneboy.com/gurus)
To unsubscribe, mailto:fw1-gurus-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, mailto:fw1-gurus-help@xxxxxxxxxxxxxxxxxx