Everyone, I am working on a SSG-550M firewall running 6.2 ScreenOS and I am trying to set up some methods to translate 3 ip addresses from private to public, then back again. I have two interfaces that this traffic comes through, so I set up a redundant group to do group the two together. This would be rather easy if I did not need a one to one relationship with a private IP address to a public IP address (trust to untrust). I have used shift dips to successfully get the traffic out with no problems, NAT was good. My biggest problem is getting the traffic back in with NAT changing the IP addresses back to what they were on the trust side. I have been trying to work with MIP but it does not work at all like the many guides say. First off, after successfully creating a MIP on a group, I can't get a policy to leverage the MIP because it says that is undefined. It also does not like me using a CIDR within the policy to call out the MIP which is something I need in order to do a multiple address translation. Finally, I set up DST NAT changes and that works for one, but it may be pulling from the DIP because in takes the form of any of the trusted IP addresses. Any thoughts?
