RE: Need TCP-IP guru advice - 2 networks, 1 firewall

Sounds like your default route on the PC that are directly connected to the
firewall side does not have a route back to your second network on the as400
side.  So the firewall need to know about the 172.22.x.x subnet with a hop
of your as400 on the 172.24.x.x network.

Chris Bipes

-----Original Message-----
From: Jim Essinger

Responding to 2 previous messages;

Chris,

No, I can't ping any devices across the two networks, although at one time 
in the past I could.  Don't know what changed.  The AS/400 has a default 
route of the firewall address (172.24.1.10)

>Sound like it might be a firewall configuration problem.  Can you ping any
>devices across the two networks?  Does your AS400 have a default route of
>your Firewall?
>
>Chris Bipes

James,

The hosts on the 172.22.***.*** network are all pointing to the AS/400 
(172.22.1.1) as their default route, and the AS/400 has a default of the 
firewall device (172.24.1.10).

Will the virtual ethernet on the AS/400 allow me to connect the two 
networks?  What else can I check?

>The hosts on the network that the firewall is *not* on need to have the
>default route pointing to the AS/400. IOW, if the firewall machine is
>also the AS/400's default route, then all the hosts that must go through
>the AS/400 to get to the firewall must have the AS/400 as their default
>route.
>James Rich