topic Needed to get this topology to work ! Attached image and description in Switches, Hubs, and Modems

Needed to get this topology to work ! Attached image and description

aeonpoon — Wed, 27 Oct 2010 06:15:48 GMT

Hi to all, I have a question which is I have given this topology and I need the connections and give the address to each interface and did ping from router to gateway and realise

1)router can only ping to 10.2.2.1/30 not 10.2.2.2/30.

2)checkpoint firewall ping to router is able to but to gateway 10.3.3.1/30 is not able.

3)gateway ping to checkpoint is able to get response from 10.2.2.1 but not 10.1.1.2/30

I have open the rules up to from any to any, did routing tables too but still cannot get it to work, trying my luck here if anyone can guide me. Thanks so much in advance to all

Re: Needed to get this topology to work ! Attached image and description

Mohammed Faiz — Wed, 27 Oct 2010 08:37:10 GMT

Hi,

Well the first thing to check is whether you have ping enable on the interfaces of your ssg550 (not just as a policy but on the 10.3.3.1 and 10.2.2.2 interfaces themselves).

Can you post a copy of the routing tables for the SSG550 and the checkpoint?

Re: Needed to get this topology to work ! Attached image and description

aeonpoon — Wed, 27 Oct 2010 11:08:06 GMT

Thanks Faiz, I remembered I open ping services on both interfaces on SSG 500, I will post the routing tables tomorrow ! Thanks so much for your answers ~~

Re: Needed to get this topology to work ! Attached image and description

aeonpoon — Thu, 28 Oct 2010 00:47:35 GMT

Hi Faiz, here is the routing table you requested

Juniper SSG 500
http://i367.photobucket.com/albums/oo117/aeonpoon/capture_28102010_093959.jpg

Checkpoint UTM-1 570
http://i367.photobucket.com/albums/oo117/aeonpoon/CheckpointFirewallroutingtable.png

Thanks for your reply and I could make it work.

Re: Needed to get this topology to work ! Attached image and description

Mohammed Faiz — Thu, 28 Oct 2010 09:06:58 GMT

Ok, that looks on on a first glance (though you don't have any default routes set which may cause issues later).
The problems that you mention seem to point to an issue on the checkpoint, unfortunately I don't know enough about the checkpoint device.
For example point 1) that you mention seems very strange, there is not reason that that should not work.
Can you put the checkpoint in transparent mode temporarily to test (you'd need to adjust the IP on either the router interface or the SSG)?

Re: Needed to get this topology to work ! Attached image and description

aeonpoon — Thu, 28 Oct 2010 12:59:37 GMT

Alright thanks ! I will try your method and see how it goes ! Thanks a lot ~

Re: Needed to get this topology to work ! Attached image and description

aeonpoon — Fri, 29 Oct 2010 00:36:44 GMT

you said change the firewall to transparent but I don't think it has the feature.

Re: Needed to get this topology to work ! Attached image and description

Mohammed Faiz — Fri, 29 Oct 2010 08:34:45 GMT

That was just a suggestion, I'm not that familiar with checkpoint boxes.
I suspect if you remove the checkpoint completely (and adjust the IP on Juniper or the Router) either the your routing will work fine.

Re: Needed to get this topology to work ! Attached image and description

aeonpoon — Fri, 29 Oct 2010 13:13:13 GMT

Alright thanks I try and error see how it works out finally ! Appreciate your help a lot !