ScreenOS Firewalls (NOT SRX)
Blogs
Discussion Forums
Programs & Events
turn on suggestions Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Reply
Topic Options
Monkeyman
Contributor
Monkeyman
Posts: 12
Registered: ‎07-08-2008
0
Accepted Solution

SSG20 how to forward a port to a host on DMZ

Options

‎02-07-2010 02:17 PM

Hi, I have an SSG with a couple of servers running on the trusted interface. I have a few ports published via VIP and they are accessible from the internet. I have one server on the DMZ interface but cant get the port forwarding working to that server.

 

I currently have an allow all policy from DMZ > UNTRUST and  from UNTRUST > DMZ

 

I also have VIP configured on the UNTRUST interface to forward the port to the ip of my server in DMZ

 

Am I missing something here?

 

 

thanks

 

 

 

Message 1 of 5 (5,563 Views)
 
Reply
TravisJohnson
Contributor
TravisJohnson
Posts: 116
Registered: ‎12-14-2009
0

Re: SSG20 how to forward a port to a host on DMZ

Options

‎02-07-2010 11:04 PM

Sounds like you have covered it, can you post config related to VIP and Policies for services you are trying to forward?

________________________________________________


If my post helped you, please feel free to give me kudos.
Message 2 of 5 (5,546 Views)
 
Reply
TravisJohnson
Contributor
TravisJohnson
Posts: 116
Registered: ‎12-14-2009
0

Re: SSG20 how to forward a port to a host on DMZ

Options

‎02-07-2010 11:05 PM

Sorry for double reply, but....

 

The policy for untrust to dmz allow all won't work for the VIP.

 

You have to create a policy and place it above the any with the vip as the destination.

________________________________________________


If my post helped you, please feel free to give me kudos.
Message 3 of 5 (5,545 Views)
 
Reply
Monkeyman
Contributor
Monkeyman
Posts: 12
Registered: ‎07-08-2008
0

Re: SSG20 how to forward a port to a host on DMZ

Options

‎02-08-2010 12:34 AM

That worked great, thanks for the info!

 

 

Message 4 of 5 (5,537 Views)
 
Reply
TravisJohnson
Contributor
TravisJohnson
Posts: 116
Registered: ‎12-14-2009
0

Re: SSG20 how to forward a port to a host on DMZ

Options

‎02-09-2010 09:42 PM

That's what we are here for

________________________________________________


If my post helped you, please feel free to give me kudos.
Message 5 of 5 (5,473 Views)
 
Reply
Copyright© 1999-2013 Juniper Networks, Inc. All rights reserved.