On Wed, 4 Mar 2009, Ian MacKinnon wrote:

| I am trying to configure this so that it uses the IP address of the outside
| interface for outgoing traffic
| ie lan 10.0.0.0/24, Wan 66.66.66.2/30
| 
| Then I want all outgoing traffic from LAN to wan use 66.66.66.2

Try something like this:

security {
    policies {
        from-zone trust to-zone untrust {
            policy NAT-EVERYTHING {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit {
                        source-nat {
                            interface;
                        }
                    }
                }
            }
        }
    }
}

-Jorgen
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp

Reply via email to