Screen OS

I'm trying to move from a SonicWall to Juniper SSG550 and am running into problems with the DMZ.  The Sonicwall has the DMZ set up in transparent mode so the DMZ servers all have public IP's.  We also have several NAT'd servers.  How would I go about reproducing this setup on the Juniper?  It looks like I'll need to use the V1-DMZ zone, but then I run into policy problems mixing L2 and L3.  Any Help would be greatly appreciated.

Hi DimHelmet,

 

Juniper Firewall don t support the mixed mode L2 and L3 on SSG550. So you have to choose L2 or L3.

To put your device in a full transparent mode , you have to set every interface in a L2 Zone ( Zone that start with V1-... ) or in the null zone.

 

In your case ( if you realy need translation and routing), you should work in a full L3 mode , set up your servers with private IP adress and use destination adresse translation ( with MIP ) in order to simulate the same kind of config than the sonicwall.

 

 

Thanks for the info.  That's what I figured I would have to do, but I thought I'd check first.