1. Home
  2. Networking Firewalls
  3. To Alan Strassberg - Routing On Netscreen 5XP

To Alan Strassberg - Routing On Netscreen 5XP

Hi Alan,

Dunno if you remember, but last week I posted a topic on routing through a Netscreen 5XP, to which you replied. I tried your solution, and could ping through the 5XP, managed to ping the gateway (192.168.0.1) and open the gateway http management page. However I couldn't get traffic to go any further than this. But if you plug into the network on the other side, not going through the netscreen, then I could go out through the gateway!

Any ideas why I can't reach the internet when behind the netscreen?

Many thanks for your help

Ben

Reply to
Ben
Loading thread data ...

I said ...

set interface trust ip 192.168.0.2/24 set interface untrust ip 10.0.0.1/24 set route 0.0.0.0/0 interface trust gateway 192.168.0.1 set policy id 7 from "Untrust" to "Trust" "10.0.0.10" "192.168.0.1/32" "ANY" nat src permit log

No, the policy ID doesn't matter.

If 192.168.0.1 is the gateway the route needs to go there.

alan alanstrassberg @ yahoo.com

Reply to
Alan Strassberg

Cabling-Design.com Forums website is not affiliated with any of the manufacturers or service providers discussed here. All logos and trade names are the property of their respective owners.