Someone posted the following yesterday (Sorry, i've
lost the attrib):
> :> > > My customer requires the following for their firewall:
> :> > >
> :> > > 1) two token ring interfaces (yikes !)
> :> > > 2) map many RFC 1597 internal addresses to one valid external Class C address
> :> > > 3) map many external Class C addresses to many internal RFC 1597 addresses.
> :> > >
> :> > > I have found that fullfilling these requirements is non-trival.
> :> > >
> :> > > - PIX from cisco fails test 1.
> :> > > - Raptor passes test 1 and 2 but fails 3. (probably others as well)
> :> > > - Checkpoint passes 2 and 3 but fails 1. (at least on Sparc, unsure about HP)
I've checked this with our FireWall-1 Gurus and have
been told that this information is incorrect. In
fact, FW-1 has no trouble supporting 2 TR if.s
both on HP and Sparc.
If there are other questions on this, please pass
them along.
-nik
--
Nik D. Knoth Email: nik @
qualix .
com
Qualix Support Team Office: 415.638.4106
The Qualix Group, Inc. Fax: 415.572.1300
|
|