?
Solved

NetScreen 5GT MIPs Shutdown Internet Access!!

Posted on 2004-09-16
2
Medium Priority
?
482 Views
Last Modified: 2008-01-09
Hi guys! Ive setup my netscreen 5gt in a dualt untrust mode (but I only have my wireless T1 line plugged in) and I have a /28 Ip Range.  I wanted to give specific computer a permanent IP (My webserver) and also allow access to that server from the outside. Here is how I have it setup:
Webserver:
x.x.15.212 (mapped ip using mask 255.255.255.255) => 192.168.0.11 (using the trust-vr routing) Policies: Allow Any ICMP, DNS, HTTP, HTTPS
Test Computer:
 x.x.15.213 (mapped ip using mask 255.255.255.255) => 192.168.0.12 (using the trust-vr routing) Policies: Allow Any

The webserver works beautifully, but whenever I map anything else using similar policy configurations they all of a sudden do not have internet access any more. They can still go around the local area network, but they do not have any access throught the firewall. Thought if there is no MIP to that specific private IP the person has internet access, but cannot get people to go to that server. I have also tried just using policies with the Advanced setup to have all IPs sent to x.x.15.213 to be translated by NAT to 192.168.0.12.  I use a /16 private IP space and all my computers with DHCP can get to the Internet fine. This is my first time dealing with the netscreen, and I have no idea why multiple MIPs will not work. Everything looks like it should. Please help!!
0
Comment
Question by:cohortq
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
2 Comments
 
LVL 1

Author Comment

by:cohortq
ID: 12115067
I have found the answer!! I was reassigning IPs that were in use prior to me mapping them. They would not work because the ARP cache of the Router and netscreen still showed them mapped to a specified adapter.  By clearing the ARP cache of both the perimeter router and the netscreen I was able to get these mapped IPs to work. YAY!!
0
 

Accepted Solution

by:
PAQ_Man earned 0 total points
ID: 13570896
Question Closed, 500 points refunded.
PAQ_Man
Community Support Moderator
0

Featured Post

Optimize your web performance

What's in the eBook?
- Full list of reasons for poor performance
- Ultimate measures to speed things up
- Primary web monitoring types
- KPIs you should be monitoring in order to increase your ROI

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Wikipedia defines 'Script Kiddies' in this informal way: "In hacker culture, a script kiddie, occasionally script bunny, skiddie, script kitty, script-running juvenile (SRJ), or similar, is a derogatory term used to describe those who use scripts or…
This article offers some helpful and general tips for safe browsing and online shopping. It offers simple and manageable procedures that help to ensure the safety of one's personal information and the security of any devices.
Monitoring a network: how to monitor network services and why? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the philosophy behind service monitoring and why a handshake validation is critical in network monitoring. Software utilized …
This is my first video review of Microsoft Bookings, I will be doing a part two with a bit more information, but wanted to get this out to you folks.
Suggested Courses

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question