[j-nsp] nat - non-inline - service card ms-mic-16G in mx104

Aaron aaron1 at gvtc.com
Tue Mar 8 12:21:53 EST 2016


Anybody know what I'm doing wrong ?  I can't seem to get nat to work.  I'm
trying to do v4 to v4 with port translation (NAPT-44) using NON-inline nat.
so I'm using an MX104 with a MS-MIC-16G

 

FPC 1                     BUILTIN      BUILTIN           MPC BUILTIN

  MIC 0          REV 17   750-123456   123456          MS-MIC-16G

    PIC 0                 BUILTIN      BUILTIN           MS-MIC-16G

 

My config currently..

 

Ge-1/3/1 is my nat inside interface

Ge-1/3/2 is my nat outside interface

 

root> show configuration | display set

set version 13.3R6.5

set system root-authentication encrypted-password "removed"

set system syslog user * any emergency

set system syslog file messages any notice

set system syslog file messages authorization info

set system syslog file interactive-commands interactive-commands any

set chassis fpc 1 pic 0 adaptive-services service-package layer-3

set services service-set sset2 nat-rules rule1

set services service-set sset2 interface-service service-interface sp-1/0/0

set services nat pool nat1 address 1.2.3.0/25

set services nat pool nat1 port automatic auto

set services nat rule rule1 match-direction input

set services nat rule rule1 term other1 from source-address-range low
9.9.9.1 high 9.9.9.100

set services nat rule rule1 term other1 then translated source-pool nat1

set services nat rule rule1 term other1 then translated translation-type
napt-44

set interfaces sp-1/0/0 description "cgn interface"

set interfaces sp-1/0/0 services-options cgn-pic

set interfaces sp-1/0/0 unit 0 family inet

set interfaces ge-1/3/0 disable

set interfaces ge-1/3/1 description private

set interfaces ge-1/3/1 speed 100m

set interfaces ge-1/3/1 unit 0 family inet service input service-set sset2

set interfaces ge-1/3/1 unit 0 family inet service output service-set sset2

set interfaces ge-1/3/1 unit 0 family inet address 10.144.1.5/30

set interfaces ge-1/3/2 description public

set interfaces ge-1/3/2 speed 100m

set interfaces ge-1/3/2 unit 0 family inet address 10.144.2.5/30

set routing-options static route 9.9.9.0/24 next-hop 10.144.1.6

 



More information about the juniper-nsp mailing list