- CheckMates
- :
- Non-English Discussions
- :
- Chinese 中文
- :
- Re: 在vpn domain裡排除特定subnet
Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×
Sign in with your Check Point UserCenter/PartnerMap account to access more great content and get a chance to win some Apple AirPods! If you don't have an account, create one now for free!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
在vpn domain裡排除特定subnet
各位如果在設定VPN時需要將某些IP或者subnet排除在vpn domain裡,可以試試以下這篇SK:
Excluding subnets in encryption domain from accessing a specific VPN community
這招連Star架構的vpn routing設定成To center only都有效。
但是請注意crypt.def檔的位置,不同的管理主機搭配不同的gateway版本位置會不太一樣,在以下SK也有說明:
Location of 'crypt.def' files on Security Management Server
比方說我們公司的客戶管理主機是R80.10,但gateway是R77.30,那crypt.def的位置就在"/opt/CPSFWR77CMP-R80/lib/"裡,改錯是無效的。
3 Replies
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
N大哩就故謀來啊
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
沒辦法最近被人唸到快七孔流血
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
誰叫你最近都只潛水
