Quantcast
Channel: ScreenOS Firewalls (NOT SRX) topics
Viewing all articles
Browse latest Browse all 763

Unable to access MIP

$
0
0

Hi All,

 

I've configured a MIP on Untrust Interface and created a policy as below. However I'm unable to access it from outside.

This was working all while until last week when we changes the ISP to a new Provider. Accordingly I've changed just the IP addresses but after the change its not working as expected.

 

Also i tested accessing (HTTP) Private IP : 192.168.39.47 from LAN and through VPN which is working fine.

 

Also earlier I was able to access the firewall Untrust interface via WebUI / SSH which is also not working now after the change though the interface is pingable.

 

ISP has alloted a /29 subnet and i've assigned one of the static IP to MIP

 

Untrust Interface Config:

set interface ethernet0/0 ip X.X.X.X/29
set interface ethernet0/0 nat

set interface ethernet0/0 ip manageable

set interface ethernet0/0 manage ping

set interface ethernet0/0 manage ssh

set interface ethernet0/0 manage web

 

MIP Config:

set interface "ethernet0/0" mip X.X.X.X host 192.168.39.47 netmask 255.255.255.255 vr "trust-vr"

 

Policy:

set policy id 12 from "Untrust" to "Trust"  "Any" "MIP(X.X.X.X)" "HTTP" permit log
set policy id 12
exit

 

Route Config:

set route 0.0.0.0/0 interface ethernet0/0 gateway X.X.X.X permanent

 

get socket output


 Socket  Type   State      Remote IP         Port    Local IP         Port
      0  tcp4/6  listen     ::                   0    ::                 80
      1  tcp4/6  listen     ::                   0    ::                443
      2  tcp4/6  listen     ::                   0    ::                 23
      3  tcp4/6  listen     ::                   0    ::                 22
     64  udp     open       0.0.0.0              0    0.0.0.0             0
     65  udp     open       0.0.0.0              0    0.0.0.0             0
     66  udp     open       0.0.0.0              0    0.0.0.0             0
     67  udp4/6  open       ::                   0    ::                500
     68  udp4/6  open       ::                   0    ::               4500
     69  udp4/6  open       ::                   0    ::                500
     70  udp4/6  open       ::                   0    ::               4500
     71  udp4/6  open       ::                   0    ::                123
     72  udp4/6  open       ::                   0    ::                161
    178  udp     open       0.0.0.0              0    0.0.0.0             0
    304  udp     open       0.0.0.0              0    0.0.0.0             0

Raw IP sockets:
 Socket  Type   Remote IP         Local IP         Protocol
    320  raw     0.0.0.0           0.0.0.0          01h
    322  raw     0.0.0.0           0.0.0.0          01h
             
Raw packet sockets:
 Socket  Type   Remote Mac    Local Mac    Protocol
    321  eth     000000000000  000000000000 0806h

 

 

 

I'm quite new to the environment and any help is much appriciated Smiley Happy

 

Thanks.


Viewing all articles
Browse latest Browse all 763

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>