Network connect IP range

[Luca_]

Is it possile to have a network connect IP range that is on a different subnet that the SA2000's internal IP addresss?

For example, say the SA2000 is 10.1.1.1/24

Is it possible to create a network connect profile that uses the range 10.50.50.0 to 10.50.50.255?

I'm guess that the switch interface that this connects to will need to be configured as a trunk, and in the netscreen firewall a new zone/interface would need to be configured in the range.

Anyone else has experience doing this?

thanks

[df_]

Yes, you can do that, and you don't need to do a trunk port. You just need to enter a static route on your router (or layer 3 switch) so that anything to 10.50.50.0 255.255.255.0 will be routed to your SA2000 IP address of 10.1.1.1

If you are using Cisco equipment, the config would look like this:

ip route 10.50.50.0 255.255.255.0 10.1.1.1

It depends on your network and router design as to where that route would go.