thanks i`ll try it asap:
sgg5 configuration looks like this now:
ethernet0/4 - 0.0.0.0/0 Null Unused Up
ethernet0/4.1 3 172.16.1.1/24 zone3 Layer3 Up
dhcp range 172.16.1.20 - 172.16.1.100
Regards
ps. it is working now so far - another question:
i made a policy zone3 to untrust allow any any but i cannot get out into internet..