Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Browsing all 2577 articles
Browse latest View live

Re: NS 208 port forwarding

I'll double check the address tonight. I want to say interface x.x.x.138/29 and the VIP x.x.x.139. The NS208 didn't throw an error that they weren't in the same rangeI did disable the auto detect but I...

View Article


Re: NS 208 port forwarding

I tried changing the VIP to x.x.x.140 and it didn't resolve anything. I was thinking it might be causing an issue becuase I believe I was possibly using the default gateway IP as the VIP. I did check...

View Article


Re: NS 208 port forwarding

Anyone got any ideas of which button I'm forgetting to click? I'm getting frustrated that I can't figure this out

View Article

Re: NS 208 port forwarding

I can see that proxy arp is enabled in the configuration above so that part should be good.  And the policy seems to match the forwarding. Since there are no hits on the policy from your connection...

View Article

Re: NS 208 port forwarding

I moved the policy to the top of the list and then I tried all the debug commands I can think of ns208->  get ffiltFlow filter based on:id:0 src ip x.x..37.180 dst ip x.x.114.140 -> My IP to...

View Article


Re: NS 208 port forwarding

Here is another weird thing... I had someone switch the DVR to a DHCP address and it got 192.168.0.117. I can ping this address but it doesn't show up under the DHCP report as being issued.

View Article

Re: NS 208 port forwarding

If you are trying to go to x.x..37.180:81, and it redirects it to x.x.114.140, we should see this coming in on a debug flow basic.  The previous debug flow basic showed that it was coming to the...

View Article

Re: NS 208 port forwarding

There are no upstream switches or routers this is the only device in the network.Traffic should flow like this currentlyX.x.37.180 (my house IP) -> x.x.114.138 (static isp IP of the company and also...

View Article


Re: NS 208 port forwarding

Is my problem my interface IP is setup as my ISP static IP when it should be some other number and the VIP should be the ISP IP? I only have 1 IP coming into this connection so that's why the interface...

View Article


Re: NS 208 port forwarding

Is my problem my interface IP is setup as my ISP static IP when it should be some other number and the VIP should be the ISP IP? I only have 1 IP coming into this connection so that's why the interface...

View Article

Re: NS 208 port forwarding

 I'm confused by this.  Are you saying you only have one ip address assigned by the ISP?Then yes, you would not be able to use another ip in the subnet for a vip it won't work.  Yes that is exacty what...

View Article

Re: NS 208 port forwarding

Ok, in that case you must create the vip to the interface ip address using that selection option and you cannot use other ip addresses in the subnet range. Delete the vips setup to the 140 addressin...

View Article

Re: NS 208 port forwarding

You will need to remove the policies that reference the VIP before you can remove the VIP.  Once you set up the VIP same as untrust, then you will need to add the untrust to trust policies and...

View Article


Re: NS 208 port forwarding

Got some more info... This company has 5 IP's available to use x.x.114.138-142 so I setup the VIP on the x.x.114.139 address and still can't do anything. The app won't work and the IP won't respond to...

View Article

Re: NS 208 port forwarding

ok, I assume these addresses are in the same /29 as your eth3 interface ip.  If they are in the subnet no configuration by the ISP is needed. This command in your posted config does enable proxy...

View Article


Re: cannnot connect to webui using any browser

Thanks Alot Man it worked...Kudos

View Article

Re: cannnot connect to webui using any browser

Thanks Alot It work..

View Article


How to Migrate Netscreen SSG20 to JunOS SRX320

Hi Support, How can i migrate netscreen SSG20 "Firmware Version: 6.2.0r5.0 (Firewall+VPN)" to JunOX SRX320 device? 

View Article

Interoperability Fortigate and Netscreen ISG1000

Dear all, I have an ISG1000 and a Fortigate be configured VPN site-to-site.  The operation is good but recently, traffic cannot pass via Tunnel VPN (Tunnel still up) so my customer needs to run the...

View Article

Re: Interoperability Fortigate and Netscreen ISG1000

When traffic stopped working after disabling the monitor, do you see the IPSEC SA as Active or Inactive in the get sa? Who is the initiator for the VPN: ISG or Fortigate? Please share the output for...

View Article
Browsing all 2577 articles
Browse latest View live


<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>