Remote Management and Static NAT to Static NAT

[checkpointrookie]

I am fairly new to working with Checkpoint products. Most of my background is with Cisco routers and switches. I am trying to find out if it is possible to have the following setup....

Main Network

Windows 2000 Management Server - 172.24.8.15 behind a Checkpoint FW-1/VPN-1 with address 172.24.6.11 and has a public IP address like 65.1.1.1. In addition I have a Static NAT 65.1.1.2 to the management server 172.24.8.15.

Remote site Checkpoint FW-1/VPN-1 with a static NAT 69.1.1.1 to 172.24.7.20. The private address 172.24.7.20 is the address that is registered with Checkpoint for the licensing.

What I would like to do is be able to manage both Firewalls with the 172.24.8.15 server and create a VPN tunnel between the two Firewalls.

I am unsure of how this would be done with the putkeys and licensing issues. Both of my FW-1/VPN-1 boxes are Nokia boxes and are running version 4.1. The Management server is a Windows 2000 system that is running NG. Any help would be greatly appreciated. We no longer are able to pay for support so I can't upgrade to any newer versions.

Thanks,
Travis

[checkpointrookie]

Does anyone have any idea whether or not this scenario is possible? I have looked all over this site, the Checkpoint SecureKnowledge site, and google groups trying to find this information but, I haven't seen anything that tells me one way or the other. I did see that it is possible to have the Management Server behind a Static NAT but, not if you can also have a remote FW module behind a Static NAT.

Thanks,
Travis

[spinex]

VPN boxes will not work behind any NAT. They must be using public IP address.

As for your management server, it can be behind static NAT.