Article View: comp.security.firewalls
Article #456Re: Setup of VPN-1 Checkpoint firewall ? {Cry for Help ! :)}
From: steve
Date: Fri, 22 Sep 2000 02:22
Date: Fri, 22 Sep 2000 02:22
59 lines
3281 bytes
3281 bytes
OK, let's give it a try: Assumptions - you have a VPN version of the firewall. 1., select the firewall object - select the VPN tab. Set your internal network as the encryption domain. Select "export topology" (or whatever it is labeled) Select IKE or isakmp as the encryption. Edit and select pre-shared secrets. 2. create a rule from any to firewall for fw1-topo and IKE 3. create a user group called vpn-users and put a user in it. Make sure you select the user, vpn tab, and edit the isakmop encryption to add a password. Make sure you insttall after creating the group and editing the user. 4. create another rule from vpn-users@any to the inside net for whatever services you want. Make sure action is client-encrypt. 5. install the client on a PC and connect to the internet. Open the SR client and create a site (enter the address of the firewall). Try pinging something on the inside of the firewall and it should prompt you to authenticate. Log on as the user you defined in the firewall. You might have to play around a bit, but that should get you in the ball park. good luck In article <8q7sdb$ich$1@nnrp1.deja.com>, todd@avalys.com wrote: > Ok I am an MCSE/CCNP i should be able to figure this out but the > documentation that came with this product could be written in Jappense > for all the sense it makes. Is there a checklist anywhere on how to > setup a simple VPN here is the setup I have .. > > HP Netserver (733mhz w/ 256megs of ram) with VPN-1/Firewall-1 installed > and licenced it has 2 nics one internal and one attached to the > external router. All I want to do is be able to have remote clients > install the secure remote client and connect to the network remotely > I'm not picky about the encryption scheme whatever is easiest to > configure and maintain. I plan to take checkpoint classes in the > future but for now I have to get this up and running can anyone point > me in the right direction ? Thank you ! > > Sent via Deja.com http://www.deja.com/ > Before you buy. > Sent via Deja.com http://www.deja.com/ Before you buy.
Technical Details
Message-ID:
<8qefoi$el3$1@nnrp1.deja.com>Path:
arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-east!supernews.com!news-feed.riddles.org.uk!fr.clara.net!fr.clara.net!xfer10.netnews.com!netnews.com!news.maxwell.syr.edu!nntp2.deja.com!nnrp1.deja.com!not-for-mailReferences:
<8q7sdb$ich$1@nnrp1.deja.com>Show Full Headers
Complete Article Headers
X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,2db7bcfa76723f1c
X-Google-Attributes: gidf922c,public
X-Google-Thread: 10ed20,2db7bcfa76723f1c
X-Google-Attributes: gid10ed20,public
X-Google-Thread: fc559,2db7bcfa76723f1c
X-Google-Attributes: gidfc559,public
X-Google-ArrivalTime: 2000-09-21 19:30:09 PST
Path: arc1-ca.pugleaf.net!supernews.google.com!sn-xit-02!sn-east!supernews.com!news-feed.riddles.org.uk!fr.clara.net!fr.clara.net!xfer10.netnews.com!netnews.com!news.maxwell.syr.edu!nntp2.deja.com!nnrp1.deja.com!not-for-mail
From: steve@doxnet.com
Newsgroups: comp.security.firewalls,cp.products.firewall-1,mail.firewalls
Subject: Re: Setup of VPN-1 Checkpoint firewall ? {Cry for Help ! :)}
Date: Fri, 22 Sep 2000 02:22:29 GMT
Organization: Deja.com - Before you buy.
Lines: 59
Message-ID: <8qefoi$el3$1@nnrp1.deja.com>
References: <8q7sdb$ich$1@nnrp1.deja.com>
NNTP-Posting-Host: 216.42.3.147
X-Article-Creation-Date: Fri Sep 22 02:22:29 2000 GMT
X-Http-User-Agent: Mozilla/4.0 (compatible; MSIE 5.01; Windows NT)
X-Http-Proxy: 1.1 x51.deja.com:80 (Squid/1.1.22) for client 216.42.3.147
X-MyDeja-Info: XMYDJUIDsgrutt