Calling All Netscreen Guru's

- J
- john soto
  
  Contact options for registered users
posted
19 years ago

Sat, Dec 11, 2004 12:35 AM

I need a little help configuing out Netscreen. Out flakey Sonicwall Pro was intermittenly locking up so I ordered a Netscreen 5GT.

I'm not used to the interface.

Any quick and easy tips on how to set up one to one nats, open port

25, etc

- M
- Munpe Q
  
  Contact options for registered users
Vote on answer
posted
19 years ago

Sat, Dec 11, 2004 1:16 AM

set int unt ip 1.1.1.1/24 set int unt gate 1.1.1.2 set int trust ip 192.168.1.1/24 set int unt mip 1.1.1.3 host 192.168.1.2 netmask 255.255.255.255 vrouter "trust-vr" set pol from "Untrust" to "Trust" "ANY" "MIP(1.1.1.3)" "MAIL" permit log

- T
- Triffid
  
  Contact options for registered users
Vote on answer
posted
19 years ago

Sat, Dec 11, 2004 2:56 AM

I prefer the CLI to the GUI. YMMV.

The documentation includes worked examples which are often close to real world requirements, I recommend starting there. You need to 'get' the concept of virtual routers and zones to configure NS boxes effectively.

Was the box delivered with ScreenOS 4.x or 5.x? Both are still being enhanced (supposed to converge again in 6.x IIRC), but NAT in 5.x is significantly more flexible and intuitive.

Triffid