DMZ to TRUST/TRUST to DMZ

[srey]

I am very new to Netscreen.
I have NetScreen 25 with three ports.

Port 1: (TRUST, NAT) 192.168.90.10 will be used for private network.

Port 2: (DMZ, Route) 192.168.90.1 will be used for another private network.

Port 3: (Untrusted) 213.213.45.5 will be used to access the Internet.

At this point, what I am trying to accomplish is to have port 1 and port 2 talk to each other.

So I am able to make Port 2(DMZ to TRUST in Policy setting) to talk to Port 1 but not the other way around. That is having problem with having Port 1 talk to Port 2. I tried Trust to DMZ. any:any but didn't work.

I believe it's something to do with Policy setting and I have been playing around with it as well as reading from Knowledge Base at Netscreen, haven't been able to figure it out.

Hope you can help me out with this. Maybe there is something I miss somewhere.


Any help on this would be much apprreciated.
Thank you very much in advance.

-Exo

 

[MitchCumstein]

On the "To DMZ" tab in access policies, do you have a policy of:
Source = Inside Any
Destination = DMZ Any
Service = ANY

If not, create it and it well let anything go from Trust to DMZ