[j-nsp] Nat on J Series ES

[Jorgen Johnsen]

On Wed, 4 Mar 2009, Ian MacKinnon wrote:

| I am trying to configure this so that it uses the IP address of the outside
| interface for outgoing traffic
| ie lan 10.0.0.0/24, Wan 66.66.66.2/30
| 
| Then I want all outgoing traffic from LAN to wan use 66.66.66.2

Try something like this:

security {
    policies {
        from-zone trust to-zone untrust {
            policy NAT-EVERYTHING {
                match {
                    source-address any;
                    destination-address any;
                    application any;
                }
                then {
                    permit {
                        source-nat {
                            interface;
                        }
                    }
                }
            }
        }
    }
}

-Jorgen