[j-nsp] Nat on J Series ES

Jose Madrid jmadrid2 at gmail.com
Wed Mar 4 13:27:04 EST 2009


Ian,

Take a look at the following link:
http://remcobressers.nl/2008/07/configuring-nat-on-juniper-j-series/


On Wed, Mar 4, 2009 at 11:47 AM, Jorgen Johnsen <jojo at vinkelsliper.net> wrote:
> On Wed, 4 Mar 2009, Ian MacKinnon wrote:
>
> | I am trying to configure this so that it uses the IP address of the outside
> | interface for outgoing traffic
> | ie lan 10.0.0.0/24, Wan 66.66.66.2/30
> |
> | Then I want all outgoing traffic from LAN to wan use 66.66.66.2
>
> Try something like this:
>
> security {
>    policies {
>        from-zone trust to-zone untrust {
>            policy NAT-EVERYTHING {
>                match {
>                    source-address any;
>                    destination-address any;
>                    application any;
>                }
>                then {
>                    permit {
>                        source-nat {
>                            interface;
>                        }
>                    }
>                }
>            }
>        }
>    }
> }
>
> -Jorgen
> - Show quoted text -
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>



-- 
It has to start somewhere, it has to start sometime.  What better
place than here? What better time than now?


More information about the juniper-nsp mailing list