Watchguard 700 [Archive] - SpeedGuide.net Broadband Community

View Full Version : Watchguard 700


SLAMIK
07-26-05, 04:24 PM
Hello- I am new to this forum and IT in general. I have a Watchguard 700
that sits behind a Cisco 1720. I have purchased 5 MUVPN client licenses
for the watchguard and can connect to it from ouside the network.

The problem is I dont know what to do next. I cant seem to see any of the private network and I would like to be able to access an application on a Windows 2000 member server and some files on a NT4.0 file server. (both on the same subnet)

Any advice would be appreciated
Thanks

cyberskye
07-26-05, 09:31 PM
Explain how you do those things when physicallyu connected to the network (connecting from the LAN)

Skye

koldchillah
07-27-05, 12:19 AM
What are you plugging your computer into when testing connectivity?

After you finish configuring the interfaces, you should be plugged into a switch behind the Trusted Interface in order to see the other computers & servers on the private LAN.

SLAMIK
07-27-05, 08:00 AM
I am finding that I have a lot to learn about VPN's.

I was connected to the Internal network when I launched the VPN client. I edited the IP address for my connection so it would connect to the Trusted Interface.
The Firebox showed my connection but I was not able to ping anything
or resolve any network names. I took my laptop home and connected through
my cable modem with the External address in the VPN config and it works
great.

I was able to connect to my server using Remote Desktop and browse to other machines on the network. I still cant resolve names and I assume I need
a WINS address in the firebox to do that.

koldchillah
07-27-05, 10:03 AM
I am finding that I have a lot to learn about VPN's.

I was connected to the Internal network when I launched the VPN client. I edited the IP address for my connection so it would connect to the Trusted Interface.
The Firebox showed my connection but I was not able to ping anything
or resolve any network names. I took my laptop home and connected through
my cable modem with the External address in the VPN config and it works
great.

I was able to connect to my server using Remote Desktop and browse to other machines on the network. I still cant resolve names and I assume I need
a WINS address in the firebox to do that.

Can you resolve host names properly on the internal network alone?

Is one of your servers a domain controller?

SLAMIK
07-27-05, 02:04 PM
yes, I can resolve host names on the internal network fine when not connecting the VPN, I do have a Domain Controller on the network as well.

koldchillah
07-28-05, 09:37 AM
I was connected to the Internal network when I launched the VPN client.

If you are already on the internal network, then the VPN client is not needed. The VPN client is for when you are outside the network (ie, at home) and you need to get in.

At home do you have your network settings on your NIC matched to the internal network at the office? For example, when I used Checkpoint VPN, I setup my home network to match the subnet mask & ip range of my office LAN so that when the VPN was established, my home computer could contact the DNS server from the office and resolve host names as if it were just another computer on the network. The only issue was that I always had to use the FQDN (full name) in order to resolve host names because my home network was not a part of the domain.

SLAMIK
07-28-05, 10:04 AM
That makes sense koldchillah, I never thought about matching my home network IP
scheme with that in the office, that would simplify things alot. I appreciate your insight
and patience with a novice like myself.

keep up the great work and Thank you