Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 1506
  • Last Modified:

Can tracert to the internal address of the router but can't tracert to a machine on the internal network.. Checkpoint firewall going to a CISCO 1701 VPN

I have currently installed a CISCO 1701 at a remote site..  I have created the VPN link through our own cooperate firewall (checkpoint R55).  I am able to successfully ping \ tracert to the internal IP address of the Cisco box but I am not able to ping \ tracert to a machine on the internal network.

When I tracert to the CISCO router the trace route completes after 2 HOPS.. This first hop being our firewall and the second being the router.

This is different if I tracert to the machine on the internal network in that I get as far as our firewall and then the tracert shows request timed out...

This one is really getting to me so any suggestions will be greatfully recieved..

Caz
0
caz1762
Asked:
caz1762
  • 2
  • 2
1 Solution
 
lrmooreCommented:
The machine that you are trying to traceroute to has to have a route back to your subnet.
Is the 1701 the machine's default gateway? If not, you will need to add a static route either on the actual default gateway router, or on the machine itself.
0
 
caz1762Author Commented:
Hi,

I have tried placing the route on the machine to which I am connecting... This still doesn't work... The route I have added is as follow:

Route ADD (internal firewall address at my site) MASK 255.255.255.0 (internal IP address of the CISCO router at remote site)

Any other suggestions.. Is this a problem with our firewall or is it to do with the CISCO side of things...

Caz

0
 
lrmooreCommented:
On the Cisco side of the network.
For example only, the following addresses are used:

Local LAN= 192.168.122.0
PC on local LAN = 192.168.122.122
Cisco 1700 LAN IP = 192.168.122.1

Remote LAN (Checkpoint side) = 192.168.20.0
PC on remote LAN = 192.168.20.20
Checkpoint FW Inside IP = 192.168.20.1

On Local PC:
route add <remote lan> mask <mask> <local gateway>
C:\>route add 192.168.20.0 mask 255.255.255.0 192.168.122.1

On Remote PC:
C:\>route add 192.168.122.0 mask 255.255.255.0 192.168.20.1  
0
 
caz1762Author Commented:
Hi,

Local Lan (checkpoint side) = 192.168.1.0
PC on local Lan = 192.168.x.x
Checkpoint FW inside IP = 192.168.1.t

Remote Lan (CISCO) = 10.2.1.x
PC on local Lan = 10.2.1.z
Cisco 1701 Lan IP = 10.2.1.g

Tried to work the routes out but couldn't... Can you assist......
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now