40
GB-Ware Firewall Product Guide
•Have you added a static route on the firewall to tell it which router is used to reach the Internet? Have you set the router’s default route to be the firewall? Have you set the default route for hosts on the problem network to be the router or firewall?
•Is the wrong IP address assigned to the hosts or firewall? All net- work interfaces on the firewall must be on different logical networks.
•Is the default route assigned incorrectly? The default route should always be on the same subnet as the network interface of the host (this is true for all hosts, not just the firewall). For a firewall, the de- fault route must be an IP address on the network which is attached to the network interface.
Note
When using PPP, PPTP or PPPoE, the default route is not necessarily on the same subnet. The route is assigned by your PPP provider.
2.Why can't one host (computers and devices) behind the firewall reach the Internet?
This may indicate that the default route is assigned incorrectly (or not at all) to hosts on the protected or Private Service networks. All hosts protected by the firewall must use the IP address of the firewall’s network interface for the respective network. Hosts that reside behind routers or other gateways on these networks generally use the IP address of the gateway or router instead.
3.Why can't I access the web user interface from the protected network?
The default remote access filter set is generated from the configuration parameters entered in the Network Information screen. It is possible that the firewall’s protected network interface is on a different subnet from your host. Check the remote access filter for the web interface; it may need to be adjusted.
4.Why do I get errors when starting GBAdmin? Why is online help not displayed?
GBAdmin requires Microsoft Windows and Microsoft Internet Explorer 5.x or later. Components from Internet Explorer are used to display the online help information. Errors will occur if Internet Explorer for Windows is not correctly installed.
5. Why can't I “see” or ping the protected network interface?
First check for proper network configuration settings. If the network configu- ration is correct for the network interface, you may have the wrong cable for your connection.
•For a direct connection (firewall to host or router), you need a crossover cable.
•For a connection through a hub or switch, you need a straight- through cable.