RE: Adding 2ndary IP to IPSO

["Pieper, Rodney" <rodney.pieper () eds com>]

The question that is open is -- Where do you encounter the problem with the
addressing? You should stop the firewall process before you try to add the
address to the Nokia interface. Thus you should be able to tell if it is the
Nokia or the CheckPoint that is not allowing the problem. Work arounds would
be dependant on where the problem exists.

Rod Pieper

-----Original Message-----
From: Barney Wolff [mailto:barney () databus com]
Sent: Thursday, May 22, 2003 12:00 AM
To: Baba Jayeju
Cc: firewall-wizards () nfr net
Subject: Re: [fw-wiz] Adding 2ndary IP to IPSO


On Wed, May 21, 2003 at 03:10:35PM -0000, Baba Jayeju wrote:
> Guys, i am having problems adding a secondary IP address to an interface 
> on a NOKIA 350 box running checkpointFW-1 FP2. The problem is that this IP

> address is on the same subnet as that of the external interface. (i know 
> it is doable as i have done it on other platforms) has anyone come accross

> similar problems and what was the workaround.  

I'm not sure exactly what you're asking.  If the problem is to add a
second address on the same subnet that the first address of the interface
is on, use a netmask of 255.255.255.255 - that works on FreeBSD, and so
I suspect it will work on the Nokia.

If instead you want to transparently bridge the external subnet to an
internal interface, someone else will have to answer for fw1.
Why is it that you need to do that?

-- 
Barney Wolff         http://www.databus.com/bwresume.pdf
I'm available by contract or FT, in the NYC metro area or via the 'Net.
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards