CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > NAT (Network Address Translation)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-08-03
Junior Member
 
Join Date: 2006-07-17
Posts: 11
Rep Power: 0
pmahoney has an average reputation (10+)
Default External to Internal network access

I have the following basic network set up.

Internal network (192.168.1.0)--(192.168.x.x)Safe@Office500 (81.138.1.1)--(81.138.x.x)ADSL Router--Internet



I need to be able to give access to a client application from the internet to a server application residing on one of the internal network PC,s on a specific port number via the Checkpoint firewall. I have this working already using Micro softs routing and remote access but cannot get it to work using the checkpoint.

It comes in on say 81.45.40.1 port 50987 and is nat'ed by routing and remote access to an internal address on port 4456. How can I get a similar thing to work using the Checkpoint.

Any help greatly appreciated.
Reply With Quote
  #2 (permalink)  
Old 2006-08-07
Junior Member
 
Join Date: 2006-07-17
Posts: 11
Rep Power: 0
pmahoney has an average reputation (10+)
Default Re: External to Internal network access

I have now solved this problem.
First I created a network object representing the internal network and static nat'd this to the single public IP address.
I then created an allow and forward rule for the public IP address on a specific port number and redirected this to the required internal IP address on the required port number.
I also created an allow rule for the internal IP address to allow traffic back out for the required port(s).

Note: I had to ensure that the internal machine had the firewall IP address as its default gateway or the connection failed.
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 12:40.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0