![]() Set interface bgroup2 dhcp server option dns1 8.8.8.8 Set interface bgroup1 dhcp server option dns1 192.168.2.202 Set interface bgroup1 dhcp server option domainname nzlan Set interface bgroup0 dhcp server option dns1 192.168.1.131 Set interface bgroup0 dhcp server option domainname iplan Set interface bgroup2 dhcp server service Set interface bgroup1 dhcp server service Set interface bgroup0 dhcp server service Unset interface vlan1 bypass-others-ipsec Set interface "ethernet0/0" zone "Untrust" Set zone "V1-Untrust" screen ip-filter-src Set zone "Untrust-Tun" vrouter "trust-vr" Set auth-server "Local" server-name "Local" Set service "CrashPlan Console" protocol tcp src-port 0-65535 dst-port 4282-4282 Set service "CrashPlan Server" protocol tcp src-port 0-65535 dst-port 4280-4280 Set service "NZ_FTP" + tcp src-port 0-65535 dst-port 21-21 Set service "MyRsync" protocol tcp src-port 0-65535 dst-port 873-873 Set service "MyRDP" protocol tcp src-port 0-65535 dst-port 3389-3389 Set service "MyVOIP_TCP22" protocol tcp src-port 0-65535 dst-port 22-22 I've attached the full config here (with anonymized IPs): set clock timezone 1 The MIP & VIP map to it works perfectly - I can access it through HTTP and RDP without issues.Īny tips on what to debug, or where I've messed up my config? It works perfectly on the local network, but any pings or DNS lookups to external IP's fail. However, the 192.168.2.202 server can't initiate any outbound connections. I fear I may have inadvertently changed some settings while browsing through old settings in my attempt to reconfigure the new SSG5 unit.Īll inbound traffic seems to work as expected. ![]() However, some things are still broken, even when I reconnected the old one. ![]() No problem, I just reconnected the old one. ![]() Long story short - we tried connected the new SSG5 and some things were not working as they should. Each VIP/MIP is accompanied by relevant policies. We have a /29 IP range with a single IP setup as a MIP map to a server and two others being used for VIP maps. I've setup the new SSG5 identically to the old one. As we've been having some problems with sporadic packet loss, I've been preparing a replacement router (also an SSG5) for our current Juniper SSG5.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |