Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Unable to ping from SSG140 to external network

$
0
0

Hello,

I am having some difficulties on our newly setup firewall. We have 2 zones configured; Untrust>going to our external network nad Trust>going to our LAN network. For this setup we will allow our LAN network to reach external network (192.2.3.0/24). I have configured 2 policies for both zones to permit ANY,ANY and set the default gateway for SSG140 to next hop towards external router but still I was unable to reach external network from our "Trust" LAN network. I am not sure what I have missed. Attached is the SSG140 config. Appreciate if someone could help me on this. Thanks.

 

SSG140SSG140 

 

set zone "Trust" vrouter "trust-vr"
set zone "Untrust" vrouter "trust-vr"

set interface "ethernet0/0" zone "Untrust"
set interface "ethernet0/2" zone "Trust"
set interface ethernet0/0 ip 10.151.1.252/24
set interface ethernet0/0 route
unset interface vlan1 ip
set interface ethernet0/2 ip 100.100.2.1/24
set interface ethernet0/2 nat

set address "Trust" "10.10.1.0/24" 10.10.1.0 255.255.255.0
set address "Untrust" "10.151.1.0/24" 10.151.1.0 255.255.255.0

set vrouter "untrust-vr"
exit
set vrouter "trust-vr"
exit
set url protocol websense
exit
set policy id 1 from "Trust" to "Untrust" "Any" "Any" "ANY" permit log
set policy id 1
exit
set policy id 2 from "Untrust" to "Trust" "Any" "Any" "ANY" permit log
set policy id 2
exit

set route 0.0.0.0/0 gateway 10.151.1.251


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>