CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > NAT (Network Address Translation)
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2007-02-06
Junior Member
 
Join Date: 2006-11-04
Posts: 9
Rep Power: 0
cetta has an average reputation (10+)
Default dropped packet forwarded between two external interface

Hi,

I have 5 Vlans for local network. All Vlans connects to internet via CP NGX R60. I have one external interface on gateway. Today i create Vlan6 and same setting apply like other Vlans for Vlan 6. I am using Hide Nat all Vlans. But Vlan 6 not reach internet or DMZ. All connections dropped and "dropped packet forwarded between two external interface" message is appear in log.

Why generate this message?
Reply With Quote
  #2 (permalink)  
Old 2007-02-06
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: dropped packet forwarded between two external interface

Check the topology on vlan6 in the gateway's object. The gateway thinks this is an external interface and that you are running a limited node license, which doesn't allow you to route between external interfaces.
Reply With Quote
  #3 (permalink)  
Old 2007-02-07
Junior Member
 
Join Date: 2006-11-04
Posts: 9
Rep Power: 0
cetta has an average reputation (10+)
Default Re: dropped packet forwarded between two external interface

Thanks for reply chillyjim;

I solved problem with add route for Vlan6 on the SPLAT.
Reply With Quote
  #4 (permalink)  
Old 2007-02-07
Senior Member
 
Join Date: 2005-08-29
Location: Upstate NY
Posts: 1,670
Rep Power: 5
chillyjim has an average reputation (10+)
Send a message via AIM to chillyjim Send a message via Skype™ to chillyjim
Default Re: dropped packet forwarded between two external interface

Quote:
Originally Posted by cetta View Post
I solved problem with add route for Vlan6 on the SPLAT.
Please explain this a little more. Thanks.
Reply With Quote
  #5 (permalink)  
Old 2007-02-07
Junior Member
 
Join Date: 2006-11-04
Posts: 9
Rep Power: 0
cetta has an average reputation (10+)
Default Re: dropped packet forwarded between two external interface

Of course,

#sysconfig

and select routing and add network routing

for Vlan's routing table is below
.
.
.

192.168.7.0 192.168.2.1 255.255.255.0 UG 0 0 0 eth6
192.168.8.0 192.168.2.1 255.255.255.0 UG 0 0 0 eth6
192.168.9.0 192.168.2.1 255.255.255.0 UG 0 0 0 eth6
192.168.10.0 192.168.2.1 255.255.255.0 UG 0 0 0 eth6
.
.
.

192.168.x.0 are Vlans
192.168.2.1 is my internal network's gateway
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 13:16.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0