Netscreen Newbie

[evilphantom]

I am hoping someone can help me understand how to configure my netscreen a bit better. I currently have a Netscreen 5XT using a Dynamic IP from my DSL provider [Cable]. I have configured this properly and can provide access to the internet to all my systems. I also have a server running internally which I want to provide access from the un-trust zone to the work zone for http and ftp and possibly others in the future.
I setup a pollicy from the untrust zone to the work zone for http and FTP yet it doesn't work. Can anyone help my understand how to do the portforwarding for these services. I seem to get confused when reading the manual.

Thanks
Dez

 

[evilphantom]

I know I can use a VIP to resolve this issue as so:

http://5xt.support.netscreen.safeharbor.com/knowbase/root/public/ns10196.htm?

however I need to know how this will work with a dynamic address

Thanks

 

[Packet7]

Hello,

When you say "Work" zone, did you change the default mode? I think when configured in Home and Work mode, the NS's prevent inbound access into the Work Zone. I think you can change this back, but I don't have a lot of knowledge with the smaller models. Something to look into though...

Rgds,

John

 

[evilphantom]

I did change it to the home/work zone and it is working fine. At least for the time being. I had to set my VIP or MIP which I wasn't aware of. Anyways the issue now is when my IP changes how do I set it up so I don't have to make changes to the netscreen

Dez

 

[Packet7]

You could look into using Public DNS names and register for Dynamic DNS. Don't know how well this works, but I have heard some people having limited success. Hope this helps.

Rgds,

John