[j-nsp] (no subject)

Stefan Fouant sfouant at gmail.com
Tue Apr 15 11:52:40 EDT 2008


When you do address shifting, the Netscreen will consistently
translate the original source IP to a particular address from the DIP
pool.  So in your case, shifting from 10.1.1.5 to 1.1.10.2 1.1.10.20
will give you the following mappings:

10.1.1.5    ----------    1.1.10.2
10.1.1.6    ----------    1.1.10.3
10.1.1.7    ----------    1.1.10.4
-----------------------------------------
10.1.1.22  ----------    1.1.10.19
10.1.1.23  ----------    1.1.10.20

Keep in mind, when you use address shifting, you can't use Port
Address Translation (PAT) since there is essentially a one-to-one
mapping of original source IP to translated source IP.

HTHs.

Stefan Fouant

On Tue, Apr 15, 2008 at 5:15 AM, cscosunny <cscosunny at gmail.com> wrote:
>
>
> Hello
>
> If the set int eth3 dip 5 shift-from 10.1.1.5 1.1.10.2 1.1.10.20
>
> How is the address assignment handled? for lets say 10.1.1.7 what ip address
> will he have?
>
> Thanks
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>


More information about the juniper-nsp mailing list