想請教關於 Netscreen Port Forward 問題

ivsk

想請教各位師兄一個好basic 問題，剛開始接觸Netscreen 但係唔知點攪 >.<
剛幫手set 一隻 SSG140 想做一個 Port forward , 基本Port forwrd  wanIP:80 --> lanIP:80 用VIP成功做倒

想請教下如果我想 wanIP:8888  forward 去 lanIP:80  應該要點做?
google 左ｄconfigure 方法都唔得.  >.<

定風波

ivsk 發表於 2014-3-16 13:07

                               
登錄/註冊後可看大圖

想請教各位師兄一個好basic 問題，剛開始接觸Netscreen 但係唔知點攪 >.<
剛幫手set 一隻 SSG140 想做一個  ...

Netscreen 我未用過 而且你冇post個config file 上來好難答你。
不過大部份firewall, vpn 類產品都系用個degenerated linux/unix 系統。
而廠自己寫個gui配落去做admin。gui寫得好唔好就影響左易唔易 config

假波男

ivsk 發表於 2014-3-16 13:07

                               
登錄/註冊後可看大圖

想請教各位師兄一個好basic 問題，剛開始接觸Netscreen 但係唔知點攪 >.<
剛幫手set 一隻 SSG140 想做一個  ...

睇番POLICY ( ACCEPT ALL; REJECT ALL ) 個堆有冇SET 錯 ?

pabx

Create a mip on the interface in the ISP zone.
MIP
Network > Interfaces > Edit (for ethernetX) > MIP > New: Enter the
following, then click OK:
Mapped IP: x.x.x.x (Public IP you want to listen on)
Netmask: 32 bits (all 255's to make sure you only listen on 1 address)
Host IP Address: x.x.x.x (Internal server that you want to forward traffic to)
Host Virtual Router Name: trust-vr

If you havent created a customer service for TCP Port 8000 then you will need to do that then create the policy

Policies > (From: ISP zone, To: internal zone) New: Enter the following, then click OK:
Source Address:
Address Book Entry: (select), Any
Destination Address:
Address Book Entry: (select), MIP(x.x.x.x)
Service: TCP Port 8000
Action: Permit