[j-nsp] CGNat PBA - MX104 w/MS-MIC

David Lockuan dlockuan at gmail.com
Sun Apr 24 21:07:02 EDT 2016


Hi Aaron,

I think that the message error is because the block-size of PBA.

According the best practice the block-size would be power of 2 (check the
link
http://www.juniper.net/techpubs/en_US/junos14.1/topics/concept/nat-best-practices.html#jd0e110
).

To read the best practice and try again.

Best regard,

David.

On Friday, April 22, 2016, Aaron <aaron1 at gvtc.com> wrote:

> Ugh, I hate when it clumps it all together like that... here it is again,
> hopefully that's better...
>
>
> agould at eng-lab-mx104-cgn> show configuration services service-set
> cgn-sset |
> display set
>
> set services service-set cgn-sset syslog host 172.22.14.247 services any
>
> set services service-set cgn-sset syslog host 172.22.14.247
> facility-override daemon
>
> set services service-set cgn-sset syslog host 172.22.14.247 class
> session-logs open
>
> set services service-set cgn-sset syslog host 172.22.14.247 class nat-logs
>
> set services service-set cgn-sset syslog host 172.22.14.247 source-address
> 10.101.12.243
>
> set services service-set cgn-sset nat-rules rule1
>
> set services service-set cgn-sset next-hop-service inside-service-interface
> ms-1/0/0.1
>
> set services service-set cgn-sset next-hop-service
> outside-service-interface
> ms-1/0/0.2
>
>
> agould at eng-lab-mx104-cgn> show configuration services nat | display set
>
> set services nat pool nat1 address-range low 1.2.3.128 high 1.2.3.255
>
> set services nat pool nat1 port automatic
>
> set services nat rule rule1 match-direction input
>
> set services nat rule rule1 term other1 from source-address 10.144.0.0/24
>
> set services nat rule rule1 term other1 then translated source-pool nat1
>
> set services nat rule rule1 term other1 then translated translation-type
> napt-44
>
> - Aaron
>
>
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net <javascript:;>
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>


-- 

---
David Lockuán
JNCIA-E
JNCIS-E
JNCIA-Junos
JNCIS-SP
JNCIP-SP


More information about the juniper-nsp mailing list