[j-nsp] SRX destination-nat & ping

[Stefan Fouant]

On 7/11/2011 1:16 PM, Scott T. Cameron wrote:
> Thought I would bump this back up.
>
> Anyone have any success in getting a destination-nat on SRX respond to ICMP?
>   Any tricks to loopback to 127.0.0.1 or anything else?  Don't really care
> how, just would like it as an option.
>
> Scott

Hey Scott,

Can you describe the setup in more detail?  Usually NAT is designed to 
translate traffic for hosts that are behind the firewall, so the host 
should usually be the one to respond to ICMP.  Are you talking about 
doing destination-NAT to an address located on the SRX itself?

Stefan Fouant
JNCIE-ER #70, JNCIE-M #513, JNCI
Technical Trainer, Juniper Networks
http://www.shortestpathfirst.net
http://www.twitter.com/sfouant