Re: NetScreen 5XP, Nortel VPN client and MIPs

Article View: comp.security.firewalls

Article #464

Back to comp.security.firewalls Previous Next

#464

From: W.B.
Date: Wed, 01 Oct 2003 14:57

29 lines
2228 bytes

On Wed, 1 Oct 2003 10:42:50 +0200, Per Erik Grans�e wrote:

> Hi all.
> 
> I'm trying to make my Nortel VPN client work through my NetScreen 5XP
> (ScreenOs 4.0.3r3.0). On Netscreens support site I read about the exact
> problem (Solution ID: nskb4110
> (http://services.netscreen.com/eserverweb/esupport_customer/consumer/solutio
> narea.asp?id=nskb4110)) and have tried to set up their solution, but with no
> luck...
> I've set up the IpSec custom service information. But I can't figure out
> where to create the rule in which this service is used.
> 
> Assume my trusted net is: 192.168.0.1/24 and untrusted net is
> 100.110.120.42/20.
> From my Nortel VPN Contivity client the destination ip is: 62.68.100.102.
> 
> How do I set this up?
> 
> 
> Best regards,
>     Per

After you set up the custom service, did you set up a policy to permit said
custom service?  

It is in the policies menu.  Create a new policy from untrust to trust, set
src and dest rules, select your custom service from the service field, and
action set to permit.

Technical Details

Message-ID: <15qpmfgcmifjl$.1erk5tmcr20ma$.dlg@40tude.net>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!feed2.news.rcn.net!rcn!priapus.visi.com!phobos.visi.com!news-out.visi.com!news-1.mpls.visi.com.POSTED!not-for-mail

References: <csweb.879$2n5.481@news.get2net.dk>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII
X-Google-Thread: f922c,78478183c52c5546
X-Google-Attributes: gidf922c,public
X-Google-Thread: 102e85,78478183c52c5546
X-Google-Attributes: gid102e85,public
X-Google-ArrivalTime: 2003-10-01 07:57:08 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!newsfeed.stanford.edu!news-spur1.maxwell.syr.edu!news.maxwell.syr.edu!feed2.news.rcn.net!rcn!priapus.visi.com!phobos.visi.com!news-out.visi.com!news-1.mpls.visi.com.POSTED!not-for-mail
From: "W.B." <civikminded@yahoo.com>
Subject: Re: NetScreen 5XP, Nortel VPN client and MIPs
Newsgroups: comp.security.firewalls,fa.firewall
MIME-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
References: <csweb.879$2n5.481@news.get2net.dk>
Date: Wed, 1 Oct 2003 09:57:07 -0500
Message-ID: <15qpmfgcmifjl$.1erk5tmcr20ma$.dlg@40tude.net>
User-Agent: 40tude_Dialog/2.0.5.1
Lines: 29
Organization: VISI.com
NNTP-Posting-Date: 01 Oct 2003 09:57:08 CDT
NNTP-Posting-Host: 3a428e0e.newsreader.visi.com
X-Trace: DXC=VJLY;Sl_WF=W@c=YEV>:S6OG;lf4n<5g:hD3OXm`l_b8]jK<<Z8J4H99S[;^ikJ?M2LjVl@`]U><>
X-Complaints-To: abuse@visi.com

Reply to Parent Message