[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Configuring Static NAT on SRX-series Services Gateways

JUNOS software allows you to define static NAT rules to perform one-to-one static mapping from one IP address or subnet to another IP address or subnet without port address translation.

Before You Begin

For background information, read:

In this example, you perform the following tasks:

CLI Configuration

user@host# set security nat static rule-set rs3 from zone red
user@host# set security nat static rule-set rs3 rule r1 match destination-address 20.1.1.100
user@host# set security nat static rule-set rs3 rule r1 then static-nat prefix 10.0.0.200
user@host# set security nat static rule-set rs3 rule r1 then static-nat prefix 10.0.0.200 routing-instance ri-green
user@host# set security nat static rule-set rs3 from zone red
user@host# set security nat static rule-set rs3 rule r2 match destination-address 20.1.1.101
user@host# set security nat static rule-set rs3 rule r2 then static-nat prefix 10.0.1.200
user@host# set security nat static rule-set rs3 rule r2 then static-nat prefix 10.0.1.200 routing-instance ri-blue
user@host#set security nat static rule-set rs3 from interface ge-0/0/0.0
user@host#set security nat static rule-set rs3 rule r3 match destination address 30.1.1.3
user@host#set security nat static rule-set rs3 rule r3 then static-nat prefix 10.0.2.200
user@host#set security nat static rule-set rs4 from routing-instance ri-red
user@host#set security nat static rule-set rs4 rule r3 match destination-address 30.1.1.0/24
user@host#set security nat static rule-set rs4 rule r3 then static-nat prefix 172.16.0.0/24
[Contents] [Prev] [Next] [Index] [Report an Error]

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.