[j-nsp] SRX destination-nat & ping

[Scott T. Cameron]

On Mon, Jul 11, 2011 at 6:46 PM, Stefan Fouant <
sfouant at shortestpathfirst.net> wrote:

> On 7/11/2011 6:31 PM, Scott T. Cameron wrote:
> Unless you are doing port translation, simply matching on
> destination-address in your match statement and then specifying the
> translated address in your then statement should do the trick.  You may need
> to enable proxy-arp in your environment if the ingress IP (pre-translated)
> is a different address than the interface IP, but other than that you
> shouldn't need to do anything fancy to enable ping traffic to flow
> through...
>
> Sorry I don't have access to a device at the moment to give you a working
> config... can we see your configs in the meantime?


Thanks, this actually does work, and I am a bit surprised.  It's very
counter-intuitive, but thank you nonetheless!

Scott