Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Re: Unable to ping from SSG140 to external network

$
0
0

Are you trying to nat the traffic?

 

set interface ethernet0/2 nat

 

If not, change this to

set interface ethernet0/2 route

 

If yes, move this to the trust interface.   Note that this changes all the subnet trust address just to the interface address for outbound traffic only (trust to untrust) and only works on these default names.  The better practice is to setup the nat in the policy.

 

But the inbound will not nat for untrust initiated traffic.  For this you will need to create a MIP and policy to match or setup destination nat per the desired addresses.

 


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>