[j-nsp] Destination NAT

Per Westerlund p1 at westerlund.se
Thu Nov 28 04:36:49 EST 2013


Have you set up proxy-arp for the DNAT address? It does not work by itself, has to be manually if it is an address on the external (untrust) network.

/Per

28 nov 2013 kl. 10:32 skrev Mohammad Khalil <eng.mssk at gmail.com>:

> set security policies from-zone untrust to-zone trust policy DNAT_ALTOS_POLICY match application TELNET_DNAT
> 
> to 
> 
> set security policies from-zone untrust to-zone trust policy DNAT_ALTOS_POLICY match application junos-telnet
> 
> Did not work either



More information about the juniper-nsp mailing list