ScreenOS raw IP access MIP configuration method
ScreenOS raw IP access MIP configuration method
Environment description: firewall Trust Zone has two hosts A (IP:10.1.1.1/24) and B (IP:10.1.1.2/24). These two hosts map to Untrust Zone through MIP, host A maps IP:1.1.1.1, and host B maps IP:1.1.1.2 for external system access.
Set interface id 64 "redundant1" zone "Untrust"
Set interface "redundant1" mip 1.1.1.1 host 10.1.1.1 netmask 255.255.255.255
Set interface "redundant1" mip 1.1.1.2 host 10.1.1.2 netmask 255.255.255.255
There is now a requirement that hosts An and B can actually access each other's MIP addresses.
Solution: add slave Untrust Zone-> Global Zone policy to the firewall
Set policy top from "Untrust" to "Global"MIP (1.1.1.1)"MIP (1.1.1.2)"ANY" permit
Set policy top from "Untrust" to "Global"MIP (1.1.1.2)"MIP (1.1.1.1)"ANY" permit
