Re: NetScreen 5XP, Nortel VPN client and MIPs

Article View: comp.security.firewalls

Article #466

Back to comp.security.firewalls Previous Next

#466

From: Per Erik Grans�e
Date: Wed, 01 Oct 2003 20:39

19 lines
1875 bytes

ELE OLO wrote:
> Hi,
>
> In NetScreen's ScreenOS 4.0, your newly created MIP [mapped IP] is
> allowed to located in a differnet subnet than the interface where the
> MIP is created.
>
> I think that to create a MIP from a differnet subnet, your interface
> must be in the Untrust Zone only and not the Trust Zone or any other
> zone.
>
> I think using MIP is the way to go to try to make a proper one-to-one
> mapping.

Yes, that should be the way to not confuse IpSet when using NAT. But still,
I'm not there yet...


/Per

Technical Details

Message-ID: <IXGeb.3325$Kf4.1123@news.get2net.dk>

Path:

arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!newsfeed.stanford.edu!bloom-beacon.mit.edu!nycmny1-snh1.gtei.net!nycmny1-snf1.gtei.net!news.gtei.net!colt.net!diablo.theplanet.net!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.freenet.de!feed.news.nacamar.de!uio.no!newsfeed1.uni2.dk!news.get2net.dk.POSTED!53ab2750!not-for-mail

References: <csweb.879$2n5.481@news.get2net.dk> <ca44e3e4.0310010658.58098e85@posting.google.com>

Show Full Headers

Complete Article Headers

X-Google-Language: ENGLISH,ASCII-7-bit
X-Google-Thread: f922c,78478183c52c5546
X-Google-Attributes: gidf922c,public
X-Google-Thread: 102e85,78478183c52c5546
X-Google-Attributes: gid102e85,public
X-Google-ArrivalTime: 2003-10-01 13:39:05 PST
Path: arc1-ca.pugleaf.net!archiver1.google.com!news2.google.com!newsfeed.stanford.edu!bloom-beacon.mit.edu!nycmny1-snh1.gtei.net!nycmny1-snf1.gtei.net!news.gtei.net!colt.net!diablo.theplanet.net!newsfeed.icl.net!newsfeed.fjserv.net!newsfeed.freenet.de!feed.news.nacamar.de!uio.no!newsfeed1.uni2.dk!news.get2net.dk.POSTED!53ab2750!not-for-mail
From: "Per Erik Grans�e" <per@remove-this.gransoe.dk>
Newsgroups: comp.security.firewalls,fa.firewall
References: <csweb.879$2n5.481@news.get2net.dk> <ca44e3e4.0310010658.58098e85@posting.google.com>
Subject: Re: NetScreen 5XP, Nortel VPN client and MIPs
Lines: 21
X-Priority: 3
X-MSMail-Priority: Normal
X-Newsreader: Microsoft Outlook Express 6.00.2800.1158
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165
Message-ID: <IXGeb.3325$Kf4.1123@news.get2net.dk>
Date: Wed, 1 Oct 2003 22:39:07 +0200
NNTP-Posting-Host: 129.142.192.42
X-Complaints-To: abuse@get2.net
X-Trace: news.get2net.dk 1065040744 129.142.192.42 (Wed, 01 Oct 2003 22:39:04 CEST)
NNTP-Posting-Date: Wed, 01 Oct 2003 22:39:04 CEST
Organization: get2net Internet Kunde

Reply to Parent Message