I'm pretty sure it's already covered in the 'ScreenOS Concepts and Examples: Address Translation' guide but specifically only mentioned as part of a MIP configuration.
On Wed, Jul 23, 2008 at 5:12 AM, Sven Juergensen (KielNET) <[EMAIL PROTECTED]> wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Aha, > > reconfiguring the HTTP-adminport does > the trick. > > Could someone document this please? ;) > > Cheers, > > sven03 > > > Sven Juergensen (KielNET) wrote: > | Hm, > | > | there is one problem with this though: > | If you want to VIP port 80, the box > | tells you that this port is used for > | management purposes and won't work: > | > | Firewall-> set int e0/0 vip interface-ip 80 http 1.2.3.4 manual > | Not supported service: (ip:2.2.2.2/port:80) is for management of the box. > | > | Is there a way to switch this off so > | that port 80 from the external inter- > | face can be used? Disabling the > | management for that interface either > | completely or just 80/443 doesn't > | change the above message. > | > | Thanks and regards, > | > | sven03 > | > | > | Sven Juergensen (KielNET) wrote > | | Nice, > | | > | | that actually works and seems quite flexible. > | | Perhaps I should check the webfrontend every > | | now and then since it offers that kind of > | | configuration ;) > | | > | | Thanks! > | | > | | Regards, > | | > | | sven03 > | | > | | > | | GIULIANO (UOL) wrote: > | |> You can use VIP and the option: use the IP from the external interface > | |> > | |> And you can use and external DynDNS service to map the dynamic address > | |> to a fixed name. > | |> > | |>> Well, > | |>> > | |>> although not documented to my knowledge, > | |>> assigning a static IP via ppp to a pppoe > | |>> interface and referencing it in a mip > | |>> seems to work. ScreenOS somehow holds > | |>> the last ppp-assigned IP sticky in the > | |>> config so the MIP is valid even after > | |>> a reboot. Surely this is a dirty hack > | |>> though ;) Is there some official way > | |>> to do this? > | |>> > | |>> Thanks and regards, > | |>> > | |>> sven03 > | |>> > | |>> > | |>> Sven Juergensen (KielNET) wrote: > | |>> | Hi list, > | |>> | > | |>> | is it possible to have a static PAT on > | |>> | ScreenOS when the external (public/WAN) > | |>> | IP-Address is dynamic and point-to-point? > | |>> | > | |>> | E.g. have port 25 on the external IP map > | |>> | to a single private (1918) internal host? > | |>> | > | |>> | VIPs seem to always reference a static IP > | |>> | (destination PAT) and, like MIPs, require a > | |>> | subnet on the external interface. > | |>> | > | |>> | Could someone suggest whether this works > | |>> | and/or direct me to some sort of documen- > | |>> | tation? > | |>> | > | |>> | Many thanks and regards, > | |>> | > | |>> | sven03 > | |>> | > | |>> | > | |>> | Mit freundlichen Gruessen > | |>> | > | |>> | i. A. Sven Juergensen > | |>> | > | |>> > | |>> Mit freundlichen Gruessen > | |>> > | |>> i. A. Sven Juergensen > | |>> > | |> > | | > | | > | | Mit freundlichen Gruessen > | | > | | i. A. Sven Juergensen > | | > | > | > | Mit freundlichen Gruessen > | > | i. A. Sven Juergensen > | > _______________________________________________ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > > Mit freundlichen Gruessen > > i. A. Sven Juergensen > > - -- > Fachbereich > Informationstechnologie > > KielNET GmbH > Gesellschaft fuer Kommunikation > Preusserstr. 1-9, 24105 Kiel > > Telefon : 0431 / 2219-053 > Telefax : 0431 / 2219-005 > E-Mail : [EMAIL PROTECTED] > Internet: http://www.kielnet.de > > Geschaeftsfuehrer Eberhard Schmidt > HRB 4499 (Amtsgericht Kiel) > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.9 (GNU/Linux) > > iEYEARECAAYFAkiG9g8ACgkQnEU7erAt4TIRPQCgs3CfgpMbTtl5rCe8OJOHkSpS > +B4An24TaxyuzW6kCnhqvoqXWQwbr2oh > =3neA > -----END PGP SIGNATURE----- > _______________________________________________ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp > -- Stefan Fouant Principal Network Engineer NeuStar, Inc. - http://www.neustar.biz GPG Key ID: 0xB5E3803D _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp