RE: [FW1] Netmasks on different NIC's

["[windows-1252] Bjørnar B. Larsen" <bbl@avenir.no>]

    [ The following text is in the "windows-1252" character set. ]
    [ Your display is set for the "US-ASCII" character set. Some ]
    [ characters may be displayed incorrectly. ]


Hello everybody! It's all set up and seems to work fine now, and I'd like to
thank you all, and in case you're interested, tell you what became of my
firewall.

Summary:
 - All my subnets were off by one (my bad!)
 - I've subnetted a 16 address range instead 
   of a 32 address range on NIC5. The net 
   address is divisible by 16
 - I'm using the class B range 172.30.xxx.xxx 
   mask 255.255.0.0 on NIC6
 - I put in an extra NIC7 for future use. 

The BGP/VLSM/supernets/CIDR discussion went right over my head... Am I using
this with my current configuration?

NIC1: xxx.xxx.xxx.32-63 mask 255.255.255.224 (32 addresses)
NIC2: xxx.xxx.xxx.64-95 mask 255.255.255.224 (32 addresses)
NIC3: xxx.xxx.xxx.96-103 mask 255.255.255.248 (8 addresses)
NIC4: xxx.xxx.xxx.104-111 mask 255.255.255.248 (8 addresses)
NIC5: xxx.xxx.xxx.112-127 mask 255.255.255.224 (16 addresses)
NIC6: 172.30.xxx.xxx mask 255.255.0.0 (B range for local net)
NIC7: xxx.xxx.xxx.128-255 mask 255.255.255.192 (64 addresses)


Thank you very very much.


:) Bjørnar

I wrote:
> 
> I've got FW-1 ver4 sp3 running on NT4 SP4.
> 
> Forgive me if I'm out where the buses don't run:
> 
> One of our vendors told me you couldn't play with the netmasks on the
> Network Interface Cards as you wanted. We own a C-range, and 
> I'm interested
> in having the following setup:
> NIC1: xxx.xxx.xxx.33-64 mask 255.255.255.224 (32 addresses)
> NIC2: xxx.xxx.xxx.65-96 mask 255.255.255.224 (32 addresses)
> NIC3: xxx.xxx.xxx.97-104 mask 255.255.255.248 (8 addresses)
> NIC4: xxx.xxx.xxx.105-112 mask 255.255.255.248 (8 addresses)
> NIC5: xxx.xxx.xxx.113-144 mask 255.255.255.224 (32 addresses)
> NIC6: 192.168.xxx.xxx mask 255.255.0.0 (B range for local net)
> 
> Does this look all right to you, or do I have to group these 
> address ranges
> differently?
> 
> 
> Thanks for your input,
> 
> 
> :) Bjørnar
> 


================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================