I want to configure a Netscreen 5GT for a /28 IP subnet. The netscreen should accept all IP adresse of the subnet and should forward different ports to internal IP adresses. Here is my idea: I configure the untrust interface with the subnet, e.g. 220.127.116.11/28, the untrust interface of the Netscreen should use 18.104.22.168. Now the IP adresse 22.214.171.124 till 126.96.36.199 should also accepted by the Netscreen. Is it porssible to use VIP for forwarding the same port to different internal IP addresses? What I want to do is: Port 80 of IP 188.8.131.52 should be forwarded to the internal 192.168.1.2, Port 80 of IP 184.108.40.206 should be forwarded to the internal IP 192.168.1.3 and so on. address. Could anyone tell me if my idea is right and should work the way I want?