May be something like below would help.
show configuration security nat
source {
pool isp-1 {
address {
x.x.x.x/x;
}
}
pool isp-2 {
address {
y.y.y.y/y;
}
}
rule-set TRUST-TO-UNTRUST {
from zone TRUST;
to zone UNTRUST;
rule nat-isp1 {
match {
source-address [ server-ip1 server-ip2 ];
}
then {
source-nat {
pool {
isp-1;
}
}
rule nat-isp2 {
match {
source-address [ server-ip3 server-ip4 ];
}
then {
source-nat {
pool {
isp-2;
}
}
}
_______________________________________________
juniper-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/juniper-nsp
