Hi there,
I want to configure a Netscreen 5GT for a /28 IP subnet. The netscreen
should accept all IP adresse of the subnet and should forward different
ports to internal IP adresses. Here is my idea: I configure the untrust
interface with the subnet, e.g. 208.200.1.0/28, the untrust interface of
the Netscreen should use 208.200.1.1. Now the IP adresse 208.200.1.2
till 208.200.1.14 should also accepted by the Netscreen. Is it porssible
to use VIP for forwarding the same port to different internal IP
addresses? What I want to do is: Port 80 of IP 208.200.1.2 should be
forwarded to the internal 192.168.1.2, Port 80 of IP 208.200.1.3 should
be forwarded to the internal IP 192.168.1.3 and so on. address. Could
anyone tell me if my idea is right and should work the way I want?
Thank you!
|