[j-nsp] SRX Adding Second ISP

ashish verma ashish.scit at gmail.com
Tue Feb 18 05:21:09 EST 2014


May be something like below would help.

show configuration security nat
source {
    pool isp-1 {
        address {
           x.x.x.x/x;
        }
    }
    pool isp-2 {
        address {
           y.y.y.y/y;
        }
    }
   rule-set TRUST-TO-UNTRUST {
        from zone TRUST;
        to zone UNTRUST;
        rule nat-isp1 {
            match {
                source-address [ server-ip1 server-ip2 ];
            }
            then {
                source-nat {
                      pool {
                           isp-1;
                }
        }
    rule nat-isp2 {
            match {
                source-address [ server-ip3 server-ip4 ];
            }
            then {
                source-nat {
                      pool {
                           isp-2;
                }
        }

    }


More information about the juniper-nsp mailing list