[Contents] [Prev] [Next] [Index] [Report an Error]

Example: Configuring Source NAT on SRX-series Services Gateways

When performing source Network Address Translation, source pools provide JUNOS software with a supply of addresses from which to draw. When a NAT rule requires NAT and references a specific source pool, JUNOS software draws addresses from that pool when translation is performed. For SRX-series devices (unlike J-series), NAT is de-coupled from policies. SRX-series NAT has its own NAT rules to regulate traffic and to perform address translation.

Note: When performing source NAT on SRX-series devices, security policies are applied first and then the address in question is translated according to configured NAT source rules.

Before You Begin

For background information, read:

Source NAT rules have three available actions:

Note: off is a useful command for detail control when you are configuring source NAT rules. For example, you can configure a rule that says, “if rule A is from zone1 to zone2, do source NAT.” However, you do not want to do source NAT if the traffic egresses from interface if2, which belongs to zone2. In that case, you can define a rule B, which is from zone1 to if2 with off as the source NAT action.

In this example, you perform the following tasks:

[Contents] [Prev] [Next] [Index] [Report an Error]

Copyright © 2009, Juniper Networks, Inc. All rights reserved. Trademark Notice.