Yes , it's in place with no luck set security nat source rule-set trust-to-untrust from zone trust set security nat source rule-set trust-to-untrust to zone untrust set security nat source rule-set trust-to-untrust rule nonat match source-address 132.147.160.0/24 set security nat source rule-set trust-to-untrust rule nonat match destination-address 132.150.160.0/24 set security nat source rule-set trust-to-untrust rule nonat then source-nat off set security nat source rule-set trust-to-untrust rule nonat2 match source-address 132.147.160.0/24 set security nat source rule-set trust-to-untrust rule nonat2 match destination-address 10.6.1.0/24 set security nat source rule-set trust-to-untrust rule nonat2 then source-nat off set security nat source rule-set trust-to-untrust rule source-nat-rule match source-address 0.0.0.0/0 set security nat source rule-set trust-to-untrust rule source-nat-rule match destination-address 0.0.0.0/0 set security nat source rule-set trust-to-untrust rule source-nat-rule then source-nat interface
Do the above configuration affect what am doing ? am not that expert in SRX And sorry for using extra links for configuration On Thu, Nov 28, 2013 at 12:45 PM, Per Westerlund <[email protected]> wrote: > Yes. > > When you are done it should look like this (I much prefer this > presentation, much clearer): > > [edit security nat] > perw@srx1# show > proxy-arp { > interface ge-0/0/0.0 { > address { > 24.173.164.162/32; > } > } > } > > /Per > > PS: The example you used, > http://www.fir3net.com/Juniper-SRX-Series-Gateway/juniper-srx-destination-nat-port-forwarding.html; > it is not correct. It would have been better to use the Juniper > documentation instead of just borrowing some boilerplate configs. > > 28 nov 2013 kl. 10:41 skrev Mohammad Khalil <[email protected]>: > > set security nat proxy-arp interface ge-0/0/0.0 address 24.173.164.162/32 > ? > > > _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
