CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3.
2. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > SecureClient/SecuRemote
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2008-05-13
Junior Member
 
Join Date: 2007-10-18
Posts: 2
Rep Power: 0
me9ki has an average reputation (10+)
Default add an internal network

hi to all
last week i've changed all the internal ip addressing in my lan. before was 192.168.1.0/24 and now is 10.21.0.0/16. For semplicity reasion i mantained both address, additing the new lan as object in all security and nat rule.
the servers has 2 ip address defined.
all is working fine, in/out traffic and vpn except the secureClient:
the traffic to the old lan is ok and nope for the new lan. in smartview tracker there is a drop record by cleanup-rule
here my routing table:
Static 0.0.0.0/0 via x.x.x.x, age 20268130, cost 0, eth1c0
Connected 10.21/16 is directly connected, eth2c0
Connected 10.22/16 is directly connected, eth3c0
Connected 10.42.164/29 is directly connected, eth1c0
Connected 127.0.0.1/32 is directly connected, loop0c0
Connected 192.168.1/24 is directly connected, eth2c0
Connected 195.31.240/28 is directly connected, eth1c0

the strange:
in secure client if i check "route all traffic trought gateway" all working fine with new lan but i can't change this propierty on all my nomad user

any idea??
thanks in advance

Last edited by me9ki; 2008-05-14 at 07:22. Reason: SOLVED
Reply With Quote
  #2 (permalink)  
Old 2008-05-13
Senior Member
 
Join Date: 2006-04-27
Location: Twillight zone
Posts: 465
Rep Power: 3
abusharif has an average reputation (10+)
Default Re: add an internal network

have u added ur new internal network into Encryption domain of your VPN gateway? This is probably the issue. Make sure new network is included in ur ENC domain and do an topoligy update on the client
Reply With Quote
  #3 (permalink)  
Old 2008-05-14
Junior Member
 
Join Date: 2007-10-18
Posts: 2
Rep Power: 0
me9ki has an average reputation (10+)
Default Re: add an internal network

Quote:
Originally Posted by abusharif View Post
have u added ur new internal network into Encryption domain of your VPN gateway? This is probably the issue. Make sure new network is included in ur ENC domain and do an topoligy update on the client
thanks a lot abusharif!
the nomad need only a topology update!
Regards
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


All times are GMT -7. The time now is 14:59.


Powered by vBulletin® Version 3.7.4
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
Content Relevant URLs by vBSEO 3.2.0