[j-nsp] Destination NAT on SRX cluster

Leigh Porter leigh.porter at ukbroadband.com
Tue Mar 20 13:09:01 EDT 2012



> From: Ben Dale [mailto:bdale at comlinx.com.au]
> 
> Hi Leigh,
> 
> On 20/03/2012, at 10:53 PM, Leigh Porter wrote:
> 
> >
> > error: The number of destination NAT pools exceeds limit of 0 [edit
> > security nat destination rule-set incoming-connections rule
> > port-forward then destination-nat]  'pool'
> >     failed to get pool (wilderness)
> > error: configuration check-out failed
> 
> It looks like a bug, but try changing the "from interface reth0.352" to
> "from zone <zone of interface reth0.352>" and see if the issue goes
> away.  Failing that, upgrade to 11.1R6 and see if that fixes it.

Yeah I thought bug too. I tried the "from zone .." but it didn't fix it. I'm just about to try 11.blah

Thanks,
Leigh


______________________________________________________________________
This email has been scanned by the Symantec Email Security.cloud service.
For more information please visit http://www.symanteccloud.com
______________________________________________________________________



More information about the juniper-nsp mailing list