Shulou(Shulou.com)06/01 Report--

ScreenOS raw IP access MIP configuration method

Environment description: firewall Trust Zone has two hosts A (IP:10.1.1.1/24) and B (IP:10.1.1.2/24). These two hosts map to Untrust Zone through MIP, host A maps IP:1.1.1.1, and host B maps IP:1.1.1.2 for external system access.

Set interface id 64 "redundant1" zone "Untrust"

Set interface "redundant1" mip 1.1.1.1 host 10.1.1.1 netmask 255.255.255.255

Set interface "redundant1" mip 1.1.1.2 host 10.1.1.2 netmask 255.255.255.255

There is now a requirement that hosts An and B can actually access each other's MIP addresses.

Solution: add slave Untrust Zone-> Global Zone policy to the firewall

Set policy top from "Untrust" to "Global"MIP (1.1.1.1)"MIP (1.1.1.2)"ANY" permit

Set policy top from "Untrust" to "Global"MIP (1.1.1.2)"MIP (1.1.1.1)"ANY" permit

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.