Checkpoint VPN - Address Mapping, Authentication servers

[Dale Walker]

Greetings,

I'm looking at using Checkpoint's Firewall-1/VPN-1 with Laptops in
the field running SecureRemote.  We already have the firewall setup,
and have a small scale test implementation rule with Authentication
on the firewall setup.

Is there a way to do a DHCP like mapping to translate the apparent
addresses of the laptops coming in over the VPN so they look like, to
internal servers, like they're coming from IP addresses that they
trust?

We're also considering what to use for an Authentication server.  I'd
be interested in suggestions, preferences, experiences and war
stories.

Thanks

Dale Walker

VPN is sponsored by SecurityFocus.COM