Solved

juniper firewall with two separate subnets for public IPs giving me hassle

Posted on 2012-12-20
1
472 Views
Last Modified: 2012-12-20
I have a juniper ssg5 that is giving me some headache.  I was given two public facing blocks of 6 IPs.  
example
1.1.1.1\29
and
2.2.2.1\29

Which I have entered a single IP on the windows IIS server behind it as a public facing IP, forwarded 443 and 80, no problems (this is one from the 1.1.1.1 address).

The second block I put in as virtual IPs on the public NIC on the windows box, and added the first address as a secondary gateway, the ISP instructed me that 2.2.2.1 is my gateway and 2-6 are my usable).  In the firewall, I added the block as a network object and as secondary IP on the trusted connection with he original IP block that is working fine. Then forwarded forwarded 80 and 443.  The last IP, 2.2.2.6 doesn't respond to a ping at all, but 1-5 do. I ran a tracert from my own IP, and it stops right before my firewall, whereas the others get to my firewall and then to my IP.  Then only 2.2.2.4 responds to 443 requests, the others (2, 3, 5, 6) don't respond at all and look like they are closed to 443 from the outside world.  Any ideas?

I don't think it is my firewall setup since it can ping all my addresses, but then th elast usable doesn't work at all.  Then I don't know why it would only work for just one IP in the new block, and half way for the others in IIS.

This is on a standalone IIS box running current updates on Windows 2008 R2.
0
Comment
Question by:tsaico
1 Comment
 
LVL 9

Accepted Solution

by:
tsaico earned 0 total points
ID: 38710022
Gack, my own silliness, I had an incorrect MIP that was incorrectly forwarding my requests, killing my port forwarding.  Once removed, it is working correctly.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Sometimes drives fill up and we don't know why.  If you don't understand the best way to use the tools available, you may end up being stumped as to why your drive says it's not full when you have no space left!  Here's how you can find out...
A procedure for exporting installed hotfix details of remote computers using powershell
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
To efficiently enable the rotation of USB drives for backups, storage pools need to be created. This way no matter which USB drive is installed, the backups will successfully write without any administrative intervention. Multiple USB devices need t…

863 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

27 Experts available now in Live!

Get 1:1 Help Now