Have you set up proxy-arp for the DNAT address? It does not work by itself, has to be manually if it is an address on the external (untrust) network.
/Per 28 nov 2013 kl. 10:32 skrev Mohammad Khalil <[email protected]>: > set security policies from-zone untrust to-zone trust policy > DNAT_ALTOS_POLICY match application TELNET_DNAT > > to > > set security policies from-zone untrust to-zone trust policy > DNAT_ALTOS_POLICY match application junos-telnet > > Did not work either _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
