NAT with CP FW-1 NG on W2k Server

[achilleus]

Thanks in advance for any help!

I am setting up CP NG on a Windows 2000 Server. I have enabled RRAS. The issue I am having is getting NAT to function. I have assigned a hide NAT for internal machines. If I view the logs I see that the packets from the internal network pass through the FW and are given a NAT address. But they don't seem to make it back through the FW.

1) Should I be using RRAS? Is it necessary? Does it effect NAT?
2) If I configure a network object to define users in the domain (who only need a source NAT), are there any additional steps that need to be taken?
3) Does CP NG handle the ARP tables (I know it is supposed to; but does it)?

I really appreciate the help. The FW machine can communicate with both the internet and intranet without issue. Just cant seem to get those internal machines onto the internet.

 

[dartrav]

Hide NAT works fine.

You do need RRAS in routing mode.

You need to define objects with Hide Nat, either networks, ranges or workstations.

You don't need ARP tables for Hide NAT.