[j-nsp] Destination NAT

[Mohammad Khalil]

set security nat proxy-arp interface ge-0/0/0.0 address 24.173.164.162/32 ?


On Thu, Nov 28, 2013 at 12:36 PM, Per Westerlund <p1 at westerlund.se> wrote:

> Have you set up proxy-arp for the DNAT address? It does not work by
> itself, has to be manually if it is an address on the external (untrust)
> network.
>
> /Per
>
> 28 nov 2013 kl. 10:32 skrev Mohammad Khalil <eng.mssk at gmail.com>:
>
> set security policies from-zone untrust to-zone trust policy
> DNAT_ALTOS_POLICY match application TELNET_DNAT
>
> to
>
> set security policies from-zone untrust to-zone trust policy
> DNAT_ALTOS_POLICY match application junos-telnet
>
> Did not work either
>
>
>