SSG140 & IC4500 cannot communicate if crossing zones

JuniperForum.com

September 02, 2010, 08:42:19 PM

Welcome, Guest. Please login or register.
Did you miss your activation email?

News: If you have an interesting idea for an article or knowledgebase entry, please submit it!

Home

Help

Latest Knowledgebase Articles

How to run the NSM GUI under Mac OS X
How to setup a route-based VPN on a NetScreen
How to make your PPTP VPN client work through a NetScreen/SSG
Setting up a dial-up VPN and NetScreen Remote
How the Global Zone Works (It's probably not what you think)
How to configure NetScreen/SSG devices to work with the built in Mac OS X VPN client
How to Configure Dial-up VPN with route-based tunnels, XAuth, and use IPSecuritas

JuniperForum.com > Security > NetScreen and SSG > Topic: SSG140 & IC4500 cannot communicate if crossing zones

Pages: [1]

« previous next »

Author

Topic: SSG140 & IC4500 cannot communicate if crossing zones (Read 115 times)

y2k

Newbie

Posts: 45

SSG140 & IC4500 cannot communicate if crossing zones

« on: July 26, 2010, 06:46:31 AM »

We have an IC4500 at our DC and an SSG140 at a branch office. The IC has to talk to the SSG using SSH, and the SSG has to talk to the IC over port 11122 (not too sure what this part is for). The branch SSG is connected to a router which carries the WAN traffic to the DC. If we configure the "authentication server" on the SSG to use the interface closet to the WAN router, everything works fine. However, if we configure the authentication server to use another interface (eg LAN side interface) the devices can never talk to each other. Even though all the necessary ports are open between the SSG & the IC, and we've opened the ports on the SSG itself also (from LAN zone to WAN zone).

Does anybody have any ideas what the reason is for this and what we can do to fix it ?