I am in a bit of a quandry. If someone can help me with it, it would be appreciated. I have three Netware 5.1 servers on pure IP (without SLP yet) that I need to make operational. I have a user base of over 300 users. Users will have the IP addresses thrown to them via a non netware DHCP server in the range of 10.200.100.0/23 giving me around 500 hosts in the future. Now, the netware servers have be behind some sort of a firewall, to protect them from users. I can put up a NAT in the middle or an application proxy firewall through which all the windows client will pass through. My server addresses are in the range of 10.200.200.0/24 If I employ pure routing and add a route with my firewall, would my windows clients be able to connect to servers provided I install SLP DA on my server? Would I be able to browse the tree if NAT is involved at the firewall sitting in between users and netware servers? I intend to put my DHCP server on the user side of the firewall and hence, I am not employing Netware as DHCP. Please Advise!

"Now, the netware servers have be behind some sort of a firewall, to protect them from users" Sounds like you are trying to do give users access and not give them access at the same time. Can you be more specifc of what you are trying to do? Maybe you just need to filter some service ports?

Sounds extreme, what sort of users do you have that you'd need to put a firewall up between them and servers on the LAN? These TIDs will give you a start as to what you'd need to allow through the firewall: http://support.novell.com/cgi-bin/search/searchtid.cgi?/10061982.htm http://support.novell.com/cgi-bin/search/searchtid.cgi?/10050135.htm