[j-nsp] NAT update commit script for SRX210

Mike Devlin mikecdevlin at gmail.com
Wed Aug 27 19:02:26 EDT 2014


Thanks Mike and Scott,

Im going to give those both a shot, however as Mike mentioned, neither are
ideal situations.  If anyone has anymore suggestions that will be a little
more secure i would appreciate it.

Thanks again guys,

Mike


On Wed, Aug 27, 2014 at 10:16 AM, Scott Granados <scott at granados-llc.net>
wrote:

> Can you use the interface tag instead of the IP.
>
> So something like match interface or the inverse of how you build a source
> nat?
>
> On Aug 26, 2014, at 6:25 PM, Mike Devlin <mikecdevlin at gmail.com> wrote:
>
> > Hey Guys,
> >
> > Anyone know of a tested commit script that will update NAT config based
> on
> > a DHCP interface changing IP addresses?
> >
> > The scenario is this.  I have a location that the IP address is changing
> > roughly every month.  I have a CNAME created for the FQDN pointing to
> > dynamic DNS name that allows the DNS to get updated fairly quickly when
> > this occurs, however im still stuck manually updating static NATs after
> > this happens.
> >
> > Im looking for a commit script that will look at the IP address of
> external
> > interface (fe-0/0/7.0) and essentially do a "replace pattern <old IP
> > address> with <new IP address>"
> >
> > any suggestions?
> >
> >
> > Thanks,
> >
> > Mike
> > _______________________________________________
> > juniper-nsp mailing list juniper-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/juniper-nsp
>
>


More information about the juniper-nsp mailing list