Re: Need TCP-IP guru advice - 2 networks, 1 firewall

[Qsrvbas <qsrvbas@xxxxxxxxxxxx>]

Jim:

I'm not totally clear about your diagram. It looks like you're showing 
PCs on both sides of your firewall. Does that mean you have _3_ subnets? 
I mean, sure, the firewall has two sides, but what's the third subnet 
set as?

Anyway, two other questions... Was the same physical network working 
fine before V5 on the AS/400? If upgrading OS/400 started the trouble, 
then you can probably ignore routes on your various PCs or the firewall. 
Those should all already be set. Maybe the firewall has changed, but 
start at the AS/400.

Now, have you tried traceroutes from various PCs to the points you want 
them to reach? Just see where it tells you that routes are actually 
leading. Go to PCs on each segment and traceroute to PCs on the other 
segments. Problem configuration points should be obvious.

Tom Liotta

midrange-l-request@xxxxxxxxxxxx wrote:

>   RE: Need TCP-IP guru advice - 2 networks, 1 firewall
>  
>
> I seem to remember at V4R5 that I was able to set data gram forwarding by 
> line, and able to use the AS/400 as a passive router.  I have lost that 
> ability, though I don't know how or why.
>
> Topology looks something like this:
>
> -----------------
> |                    |
> |  AS/400      |   TR Card 1 (172.24.1.1) --> PC's -->  Firewall 
> (172.24.1.10) --> More PCs
> |                    |
> |                    |   TR card 2 (172.22.1.1)  -------> PC's (172.22.***.***)
> ------------------
>