Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Re: NS 208 port forwarding

$
0
0
Is my problem my interface IP is setup as my ISP static IP when it should be some other number 
and the VIP should be the ISP IP? I only have 1 IP coming into this connection so that's why
the interface IP is setup as the ISP IP.

I'm confused by this.  Are you saying you only have one ip address assigned by the ISP?

Then yes, you would not be able to use another ip in the subnet for a vip it won't work.

 

For the debug filter you do use the vip address for the filter. 

 

If nothing is showing up in the debug you can try snoop which does a packet capture on the external interface.  This will verify that the packets arrive from the remote site.

https://kb.juniper.net/InfoCenter/index?page=content&id=KB5411

 


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>