🚀 go-pugleaf

Hi,

In NetScreen's ScreenOS 4.0, your newly created MIP [mapped IP] is
allowed to located in a differnet subnet than the interface where the
MIP is created.

I think that to create a MIP from a differnet subnet, your interface 
must be in the Untrust Zone only and not the Trust Zone or any other
zone.

I think using MIP is the way to go to try to make a proper one-to-one
mapping.

syntax:


set interface  xx  mip x.x.x   host x.x.x.x  netmask x.x.x.x

use 

get mip 

to see what you have set up



Dean,  CCSA,NCSA,SANS GSEC,EIT,SCJP,CCNA









"Per Erik Grans�e" <per@remove-this.gransoe.dk> wrote in message news:<csweb.879$2n5.481@news.get2net.dk>...
> Hi all.
> 
> I'm trying to make my Nortel VPN client work through my NetScreen 5XP
> (ScreenOs 4.0.3r3.0). On Netscreens support site I read about the exact
> problem (Solution ID: nskb4110
> (http://services.netscreen.com/eserverweb/esupport_customer/consumer/solutio
> narea.asp?id=nskb4110)) and have tried to set up their solution, but with no
> luck...
> I've set up the IpSec custom service information. But I can't figure out
> where to create the rule in which this service is used.
> 
> Assume my trusted net is: 192.168.0.1/24 and untrusted net is
> 100.110.120.42/20.
> From my Nortel VPN Contivity client the destination ip is: 62.68.100.102.
> 
> How do I set this up?
> 
> 
> Best regards,
>     Per