asked on

Netscreen NS5xp Help with setting email forwards.

I need to find the existing Email forward on the Netscreen NS5xp box and be able to change it when we turn up the newExchange 2007 mail server on a new box (ip).

Thank you

rsivanandan

Post your config;

Cheers,
Rajesh

mspencer100

ASKER

Here is the section of the config I think we work with.
do i just need to change the line: set interface "untrust" mip 66.213.240.43 host 192.168.1.1 netmask 255.255.255.255 vr "trust-vr"
to set interface "untrust" mip 66.213.240.43 host 192.168.1.5 netmask 255.255.255.255 vr "trust-vr"
192.168.1.5 being the IP address for the new Exchange server. Or i may get antother External IP for the Exchange server...

Is this change correct?
Thanks

set interface trust ip 192.168.1.2/24
set interface trust nat
set interface untrust ip 66.213.240.42/29
set interface untrust route
unset interface vlan1 bypass-others-ipsec
unset interface vlan1 bypass-non-ip
set interface trust ident-reset
set interface untrust manage ping
set interface untrust manage scs
set interface untrust manage telnet
set interface untrust manage web
set interface untrust ident-reset
set interface "untrust" mip 66.213.240.43 host 192.168.1.1 netmask 255.255.255.255 vr "trust-vr"
set interface "untrust" mip 66.213.240.44 host 192.168.1.39 netmask 255.255.255.255 vr "trust-vr"
set interface "untrust" mip 66.213.240.45 host 192.168.1.40 netmask 255.255.255.255 vr "trust-vr"
set address Trust "Local Net" 192.168.1.0 255.255.255.0
set policy id 22 from "Untrust" to "Trust" "Any" "MIP(66.213.240.43)" "HTTP" Permit log
set policy id 23 from "Untrust" to "Trust" "Any" "MIP(66.213.240.43)" "MAIL" Permit log
set policy id 24 from "Untrust" to "Trust" "Any" "MIP(66.213.240.43)" "PING" Permit log
set policy id 25 from "Untrust" to "Trust" "Any" "MIP(66.213.240.43)" "POP3" Permit log
set policy id 26 from "Untrust" to "Trust" "Any" "MIP(66.213.240.43)" "Remote Admin" Permit log
set pki authority default scep mode "auto"
set pki x509 default cert-path partial
set global-pro policy-manager primary outgoing-interface untrust
set global-pro policy-manager secondary outgoing-interface untrust
set dns host schedule 00:00
set vrouter "untrust-vr"
exit
set vrouter "trust-vr"
unset add-default-route
set route 0.0.0.0/0 interface untrust gateway 66.213.240.41
exit

ASKER CERTIFIED SOLUTION

rsivanandan

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

mspencer100

ASKER

Thanks, I may need some help with making the changes, but I'll repost.

rsivanandan

NP.

Cheers,
Rajesh