Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Newbie question on Untrust IP range

$
0
0

L.s.

 

Until yesterday, I was stuck with a dynamically assigned IP address from my ISP.

All was working well with my SSG5.

 

Yesterday, I moved to a new place and my new ISP assigned me a /29 address:

  • x.x.x.104 (network address)
  • x.x.x.105 (gateway)
  • x.x.x.106-110 (available)
  • x.x.x.111 (broadcast)

Having entered the x.x.x.106 address with subnet /29 in the Untrust interface and added a route to x.x.x.105, the connection was working and I was able to reach the 106 IP from outside.

I added a MIP pool to the Untrust interface ranging from x.x.x.107 to x.x.x.110, but so far I was not succesful in reaching any of the other addresses (107-110).

The SSG5 simply does not reply to a PING on any address other than 106.

 

Can anyone tell me what I am doing wrong here?

 


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>