topic Re: can we map checkpoint external interface IP address for internal service announcement for public access? in General Topics https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21633#M4017 <HTML><HEAD></HEAD><BODY><P>Dear Dameon,</P><P></P><P>Thank you for your prompt response.</P><P></P><P>We have mapped with specific SIP services only, do not map with Any, but it is not working when we are natting with the Gateway external interface IP address.</P><P></P><P>When I change the same mapped object [i.e. SIP_Public_IP&nbsp;<SPAN style="color: #333333; background-color: #ffffff;">182.67.68.52</SPAN>] with different free WAN IP address<SPAN>[i.e. SIP_Public_IP&nbsp;</SPAN><SPAN style="color: #333333; background-color: #ffffff;">182.67.68.53</SPAN><SPAN>]</SPAN>, it maps the service and works. even we can telnet over the TCP/UDP port 5060 from the external network.</P><P></P><P>Regards,</P><P>HiteshB</P></BODY></HTML> Sat, 05 Jan 2019 09:17:09 GMT Hitesh_Brahmbha 2019-01-05T09:17:09Z can we map checkpoint external interface IP address for internal service announcement for public access? https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21631#M4015 <HTML><HEAD></HEAD><BODY><P>Greeting of the day!</P><P></P><P>As per the requirement, we want to map our internal service 172.16.16.50 with assigned check point gateway's external IP address 182.67.68.52 to announce the internal service for public access.</P><P></P><P>We are not using any additional free WAN IP address for the same so my question is that can we achieve this or we must require free IP address from the WAN pool for the same?</P><P></P><P>Detail information is as below:</P><P>Check Point Topology:</P><P>External Interface IP : 182.67.68.52</P><P>Public Mapping IP :&nbsp;<SPAN>182.67.68.52</SPAN></P><P>Internal server IP Address : 172.16.16.50</P><P>Service : Any</P><P></P><P>Thanks,</P><P>HiteshB</P></BODY></HTML> Sat, 05 Jan 2019 06:41:50 GMT https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21631#M4015 Hitesh_Brahmbha 2019-01-05T06:41:50Z Re: can we map checkpoint external interface IP address for internal service announcement for public access? https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21632#M4016 <HTML><HEAD></HEAD><BODY><P>If you want all ports to be accessible externally, then you need a second public IP.</P><P>If you only need specific services, then you can potentially do it with a NAT rule.</P></BODY></HTML> Sat, 05 Jan 2019 07:55:28 GMT https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21632#M4016 PhoneBoy 2019-01-05T07:55:28Z Re: can we map checkpoint external interface IP address for internal service announcement for public access? https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21633#M4017 <HTML><HEAD></HEAD><BODY><P>Dear Dameon,</P><P></P><P>Thank you for your prompt response.</P><P></P><P>We have mapped with specific SIP services only, do not map with Any, but it is not working when we are natting with the Gateway external interface IP address.</P><P></P><P>When I change the same mapped object [i.e. SIP_Public_IP&nbsp;<SPAN style="color: #333333; background-color: #ffffff;">182.67.68.52</SPAN>] with different free WAN IP address<SPAN>[i.e. SIP_Public_IP&nbsp;</SPAN><SPAN style="color: #333333; background-color: #ffffff;">182.67.68.53</SPAN><SPAN>]</SPAN>, it maps the service and works. even we can telnet over the TCP/UDP port 5060 from the external network.</P><P></P><P>Regards,</P><P>HiteshB</P></BODY></HTML> Sat, 05 Jan 2019 09:17:09 GMT https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21633#M4017 Hitesh_Brahmbha 2019-01-05T09:17:09Z Re: can we map checkpoint external interface IP address for internal service announcement for public access? https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21634#M4018 <HTML><HEAD></HEAD><BODY><P>SIP may not work in this specific situation as it utilizes a specific handler.</P><P>Might be worth a TAC case to troubleshoot in any case.</P></BODY></HTML> Sat, 05 Jan 2019 17:34:47 GMT https://community.checkpoint.com/t5/General-Topics/can-we-map-checkpoint-external-interface-IP-address-for-internal/m-p/21634#M4018 PhoneBoy 2019-01-05T17:34:47Z