Netscreen DMZ

[netmechs]

I running 3.01r on netscreen 10A and I want to place a webserver in a DMZ...

how would I go about it ? Would I use VIP with the real ip of the webserver?

I tried MIP but when i go to incoming policies for the dmz, it doesn't give me an option to pull down the mip ....

 

[DarkHat]

You need to have external IP addresses... You add the IP of your server into the adresses list and after that you make your policy to your server on http.

 

[netmechs]

I have an external IP ADDRESS

So go to Address tab
select DMZ tab
add entry for external address (real IP)

Go to policy
select DMZ
select incoming
create policy

What about the interface tab?

I have the DMZ interface setup with an 10.0.0.0 address ?

Do I have to change that address to an realip address?