Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Browsing all 2577 articles
Browse latest View live

2 WAN IPs on SSG140 - best setup for KVM?

Hello, i am preparing a SSG140 for production use - at the moment i got from our ISP the information (IPs for example):  WAN IP: 1.1.1.164/28 DNS IPs and Def. Gateway 1.1.1.160plus an own Subnet with...

View Article


Re: 5gt elastix SIP

You will also need to use the command "set alg sip enable".  You do not need to specify application though as you are using the standard SIP port (5060).  Also, it's not as much opening the high ports...

View Article


Re: 2 WAN IPs on SSG140 - best setup for KVM?

Hi, In your setup if you are not using MIP/VPN etc then I think there is no need of loopback interface. Yon can configure you Serial interface as WAN and one of the IP on eth0/2 from 4.4.4.4/27 subnet,...

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

Hey,thank you for your replay.I dont use a PIM Card / WAN Card, so i dont have a serial interface.  WAN Connection will be established through eth0/2 via ethernet cable between SSG and ISP Switch....

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

Hi, 1: MIP/VIP is used for NATting, if you have VPN established then you can directly access the iDRAC. May be you can have VPN configured on the Eth0/2. NAT will be only required if you want to access...

View Article


Re: 5gt elastix SIP

thx, after re-conf, the mobile SIP cannot register, please help. conf shown below: unset key protection enableset clock timezone 8set clock dst recurring start-weekday 2 0 3 02:00 end-weekday 1 0 11...

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

Alright, at the moment i dont understand what settings are needed for eth0/8 and eth0/9 for the two servers that will be Hosts for the VMs. We want to be able to use the whole /27 network for all VMs...

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

You can configure an IP from /27 subnet on the eth0/8 OR on eth0/9, and use this as default gateway on your VMs. Once traffic from /27 IP reaches to the device, it will do the route lookup and forward...

View Article


Re: 2 WAN IPs on SSG140 - best setup for KVM?

Thanks again for helping me. eth0/8 and eth0/9 will be connected to each own server (eth0/8 DELL , eth0/9 Lenovo) - so i could use use a bgroup for the both eth ports and just take care that every VM...

View Article


Re: 5gt elastix SIP

I would try changing both the VIP and policy to use the built in SIP service instead of your custom group to see if the ALG can recognize the traffic and trigger properly. 

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

So, i have to make sure, that every VM, running on DELL and/or Lenovo, has its own IP from that subnet. So each VM is reachable via its own IP from that subnet - for incoming and outgoing. For exmaple...

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

Yes, your understanding is right. Thanks,Vikas 

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

Ah ok ! And can i give the bgroup0/0 the IP 1.2.3.4/27 if i got this /27 network? Or one IP wasted then for the bgroup? 1.2.3.5 ? 

View Article


Re: 2 WAN IPs on SSG140 - best setup for KVM?

Yes, one IP will be needed on the firewall.  

View Article

Re: 5gt elastix SIP

thx, but  network --> Interfaces  (untrust)  --> vip (Map to Service (NO ITEM SIP (5060) to select)therefore i create service in Policy -->Policy Elements -->Services-->Custom 

View Article


Re: 2 WAN IPs on SSG140 - best setup for KVM?

Thank you so far, last question: if the eth ports are down of a bgroup, that are binded to that bgroup, also the bgroup is down itself. Is there a possbility to let it stay up ? 

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

bgroup acts as a layer three switch. Bringing down the one port shouldn't bring down the whole bgroup however the device on the down port will be impacted as usual. Thanks,Vikas

View Article


Image may be NSFW.
Clik here to view.

Re: 2 WAN IPs on SSG140 - best setup for KVM?

Installed everything today in the DC of my ISP. Everything is working as it should. Thank you very much for your help!  One last question: My isp set the gi0/1 port on the cisco catalyst switch to...

View Article

Image may be NSFW.
Clik here to view.

Re: 5gt elastix SIP

Are you running ScreenOS 6.3? This is what I see on the device for this setup There should be a SIP option in both Service and Application built in. 

View Article

Re: 2 WAN IPs on SSG140 - best setup for KVM?

Yes, in my experience Cisco and ScreenOS will not correctly auto-neg a 100 / full connection and they must be manually set on both sides. The screenOS command is this substituting your interface. set...

View Article
Browsing all 2577 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>