Hi All,
I've configured a MIP on Untrust Interface and created a policy as below. However I'm unable to access it from outside.
This was working all while until last week when we changes the ISP to a new Provider. Accordingly I've changed just the IP addresses but after the change its not working as expected.
Also i tested accessing (HTTP) Private IP : 192.168.39.47 from LAN and through VPN which is working fine.
Also earlier I was able to access the firewall Untrust interface via WebUI / SSH which is also not working now after the change though the interface is pingable.
ISP has alloted a /29 subnet and i've assigned one of the static IP to MIP
Untrust Interface Config:
set interface ethernet0/0 ip X.X.X.X/29
set interface ethernet0/0 nat
set interface ethernet0/0 ip manageable
set interface ethernet0/0 manage ping
set interface ethernet0/0 manage ssh
set interface ethernet0/0 manage web
MIP Config:
set interface "ethernet0/0" mip X.X.X.X host 192.168.39.47 netmask 255.255.255.255 vr "trust-vr"
Policy:
set policy id 12 from "Untrust" to "Trust" "Any" "MIP(X.X.X.X)" "HTTP" permit log
set policy id 12
exit
Route Config:
set route 0.0.0.0/0 interface ethernet0/0 gateway X.X.X.X permanent
get socket output
Socket Type State Remote IP Port Local IP Port
0 tcp4/6 listen :: 0 :: 80
1 tcp4/6 listen :: 0 :: 443
2 tcp4/6 listen :: 0 :: 23
3 tcp4/6 listen :: 0 :: 22
64 udp open 0.0.0.0 0 0.0.0.0 0
65 udp open 0.0.0.0 0 0.0.0.0 0
66 udp open 0.0.0.0 0 0.0.0.0 0
67 udp4/6 open :: 0 :: 500
68 udp4/6 open :: 0 :: 4500
69 udp4/6 open :: 0 :: 500
70 udp4/6 open :: 0 :: 4500
71 udp4/6 open :: 0 :: 123
72 udp4/6 open :: 0 :: 161
178 udp open 0.0.0.0 0 0.0.0.0 0
304 udp open 0.0.0.0 0 0.0.0.0 0
Raw IP sockets:
Socket Type Remote IP Local IP Protocol
320 raw 0.0.0.0 0.0.0.0 01h
322 raw 0.0.0.0 0.0.0.0 01h
Raw packet sockets:
Socket Type Remote Mac Local Mac Protocol
321 eth 000000000000 000000000000 0806h
I'm quite new to the environment and any help is much appriciated
Thanks.