Creating Static Inside Source Translations; Creating Static Outside Source Translations - Juniper JUNOSE 11.2.X IP SERVICES Configuration Manual

JunosE 11.2.x IP Services Configuration Guide

Creating Static Inside Source Translations

ip nat inside source static

Creating Static Outside Source Translations

ip nat outside source static
70
CAUTION: You must mark interfaces that participate in NAT translation as on the inside
or the outside network. See "Specifying Inside and Outside Interfaces" on page 69 for
details.
You use the ip nat inside source static command to create static translations from a
local IP address to a global IP address, and to untranslate the destination address when
a packet returns from the outside network to the inside network. When you configure
traditional NAT (both basic NAT and NAPT), you only need to use this command alone.
However, when you configure twice NAT, you must also use "ip nat outside source static"
on page 70 .
The ip nat inside source static command creates a simple (IP address only) or extended
(IP address, port, and protocol) entry in the translation table that maps the two addresses.
Use to create static translations for a source address (or address/port pair) when
routing a packet from the inside network to the outside network, and to untranslate
the destination address (or address/port pair) when a packet returns from the outside
network to the inside network.
A static translation created with the ip nat inside source static command enables any
outside host to contact the inside host by using the inside global address of the inside
host. A static translation can be used by traffic that is initiated in either direction
Example 1—Simple address translation
host (config) # ip nat inside source static 10.1.2.3 171.69.68.10
Example 2—Extended address/port translation
host (config) # ip nat inside source static tcp 10.1.2.3 15 171.69.68.10 30
Use the no version to remove the static translation and purge the associated translations
from the translation table.
See ip nat inside source static.
Less commonly used, outside source translation enables you to set up translation between
two non-unique or not publicly routable networks (for example, two separate networks
that use overlapping IP address blocks).
Use to translate the source address when routing a packet from the outside network
to the inside network, and to untranslate the destination address when a packet travels
from the inside network to the outside network.
Creates a simple (IP address only) or extended (IP address, protocol, and port) entry
in the translation table that maps the two addresses.
Copyright © 2010, Juniper Networks, Inc.