CPUG

The Check Point User Group

A Resource For The Check Point Community.  Fast.  Useful.  Independent.

1. Come to CPUG CON 2008 EUROPE in Switzerland on September 8th - 9th!
    Two days full of technical content for Check Point administrators in the beautiful Swiss Alps!
    We already have 52 attendees signed up from 14 countries!
2. CCSA/CCSE One-Week Dual-Certification Training Course with CPUG in San Francisco!
    Courses Starting 8/25, 10/6, 11/3, 12/8, (2009) 1/19, 2/9, 3/9, 4/6, 5/4, 6/8, 7/6, 8/3, 9/7.
3. Corrent S3500 SecureXL Turbocards For Sale - Last Six Remaining - Get Your Spares!
4. Join Us On LinkedIn - We now have a CPUG group.


Go Back   CPUG: The Check Point User Group > Check Point Firewall-1/VPN-1 And Related Products > Topology Issues
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

Reply
 
LinkBack Thread Tools Display Modes
  #1 (permalink)  
Old 2006-07-11
BSDsnob BSDsnob is offline
Junior Member
 
Join Date: 2006-06-06
Location: Tampa
Posts: 12
Rep Power: 0
BSDsnob has an average reputation (10+)
Default FW doesnt seem to route packets

Hello I have a dev and a prod FW environment that I set up identically with the exception that one machine is NG and the other NGX. One interface is set up to be 65.x.x.x the other is internal 192.x.x.x

The 65.x.x.x connects to my router
The router has one interface 65.x.x.1 and the other 66.x.x.1
I have a client connected to 192.x.x.x
I have a default route set via voyager to 65.x.x.1


I can ping from the FW to 65.x.x.1 but not from the client in my dev environment. In my production environment I can ping from the client to the router just fine.

I have to conclude that the FW is not forwarding the packets to the router. Can anyone help me troubleshoot why I can not connect?
Reply With Quote
  #2 (permalink)  
Old 2006-07-11
dbedit dbedit is offline
Senior Member
 
Join Date: 2006-06-14
Location: The Netherlands
Posts: 153
Rep Power: 3
dbedit has an average reputation (10+)
Default Re: FW doesnt seem to route packets

Do a tcpdump or fwmonitor on your fw interface where packets are leaving! If your segments are directly connected you don't have to route anything.
Reply With Quote
  #3 (permalink)  
Old 2006-07-11
BSDsnob BSDsnob is offline
Junior Member
 
Join Date: 2006-06-06
Location: Tampa
Posts: 12
Rep Power: 0
BSDsnob has an average reputation (10+)
Default Re: FW doesnt seem to route packets

Thank you for your advise, I think I have it narrowed down to the cisco router. Trunking was not set up incase anyone has the same problem.
Reply With Quote
  #4 (permalink)  
Old 2007-01-30
usmanshaikh usmanshaikh is offline
Member
 
Join Date: 2006-08-21
Posts: 30
Rep Power: 0
usmanshaikh has an average reputation (10+)
Default Re: FW doesnt seem to route packets

Hi,

Can you have a look at this issue and let me know the trunking that you enabled on the routers..

http://cpug.org/forums/showthread.php?t=3924


Cheers
Usman
Reply With Quote
Reply

Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are Off
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On



All times are GMT -7. The time now is 04:21.


Powered by vBulletin® Version 3.7.2
Copyright ©2000 - 2008, Jelsoft Enterprises Ltd.
LinkBacks Enabled by vBSEO 3.0.0