Switches, Hubs, and Modems
cancel
Showing results for 
Search instead for 
Did you mean: 

Needed to get this topology to work ! Attached image and description

aeonpoon
Occasional Advisor

Needed to get this topology to work ! Attached image and description

Hi to all, I have a question which is I have given this topology and I need the connections and give the address to each interface and did ping from router to gateway and realise

1)router can only ping to 10.2.2.1/30 not 10.2.2.2/30.

2)checkpoint firewall ping to router is able to but to gateway 10.3.3.1/30 is not able.

3)gateway ping to checkpoint is able to get response from 10.2.2.1 but not 10.1.1.2/30

I have open the rules up to from any to any, did routing tables too but still cannot get it to work, trying my luck here if anyone can guide me. Thanks so much in advance to all
8 REPLIES
Mohammed Faiz
Honored Contributor

Re: Needed to get this topology to work ! Attached image and description

Hi,

Well the first thing to check is whether you have ping enable on the interfaces of your ssg550 (not just as a policy but on the 10.3.3.1 and 10.2.2.2 interfaces themselves).

Can you post a copy of the routing tables for the SSG550 and the checkpoint?
aeonpoon
Occasional Advisor

Re: Needed to get this topology to work ! Attached image and description

Thanks Faiz, I remembered I open ping services on both interfaces on SSG 500, I will post the routing tables tomorrow ! Thanks so much for your answers ~~
aeonpoon
Occasional Advisor

Re: Needed to get this topology to work ! Attached image and description

Hi Faiz, here is the routing table you requested

Juniper SSG 500
http://i367.photobucket.com/albums/oo117/aeonpoon/capture_28102010_093959.jpg

Checkpoint UTM-1 570
http://i367.photobucket.com/albums/oo117/aeonpoon/CheckpointFirewallroutingtable.png

Thanks for your reply and I could make it work.
Mohammed Faiz
Honored Contributor

Re: Needed to get this topology to work ! Attached image and description

Ok, that looks on on a first glance (though you don't have any default routes set which may cause issues later).
The problems that you mention seem to point to an issue on the checkpoint, unfortunately I don't know enough about the checkpoint device.
For example point 1) that you mention seems very strange, there is not reason that that should not work.
Can you put the checkpoint in transparent mode temporarily to test (you'd need to adjust the IP on either the router interface or the SSG)?
aeonpoon
Occasional Advisor

Re: Needed to get this topology to work ! Attached image and description

Alright thanks ! I will try your method and see how it goes ! Thanks a lot ~
aeonpoon
Occasional Advisor

Re: Needed to get this topology to work ! Attached image and description

you said change the firewall to transparent but I don't think it has the feature.
Mohammed Faiz
Honored Contributor

Re: Needed to get this topology to work ! Attached image and description

That was just a suggestion, I'm not that familiar with checkpoint boxes.
I suspect if you remove the checkpoint completely (and adjust the IP on Juniper or the Router) either the your routing will work fine.
aeonpoon
Occasional Advisor

Re: Needed to get this topology to work ! Attached image and description

Alright thanks I try and error see how it works out finally ! Appreciate your help a lot !