Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual page 88

Configuring ScreenOS Devices Guide
Related
Documentation
64
In the device navigation tree, select Network > Interface.
Double-click ethernet1 (trust interface). The General Properties screen appears.
Configure the IP address as 10.1.1.1 and the Netmask as 24. Leave all other settings
as default.
Click OK to save your changes.
Configure the Untrust interface for ethernet2.
3.
In the device navigation tree, select Network > Interface.
Double-click ethernet2 (untrust interface). The General Properties screen appears.
Configure the IP address as 1.1.1.1 and the netmask as 24. Leave all other settings as
4.
default.
Click OK to save your changes.
In the interface navigation tree, select NAT > MIP to display the MIP screen.
5.
Click the Add icon and configure the following:
6.
For Mapped IP, enter 1.1.1.5.
For Netmask, enter 32.
For Host IP, enter 10.1.1.5.
For virtual router, select trust-vr.
Click OK to save the MIP.
Click OK to save your changes to the interface, and then click OK to save your changes
7.
to the device.
Create a Global MIP to reference the MIP you created for the device. You use a Global
8.
MIP when configuring NAT in a Security Policy rule; the Global MIP references the MIP
for an individual device, enabling you to use one object (the Global MIP object) to
represent multiple MIPs in a single rule.
In the navigation tree, select Object Manager > NAT Objects > MIP.
9.
Click the Add icon to display the new Global MIP dialog box.
10.
Configure the Global MIP.
11.
Configure a firewall rule to route inbound HTTP traffic to the MIP address.
12.
Interface Network Address Translation Using MIPs on page 62
Interface Network Address Translation Using DIPs on page 67
Interface Network Address Translation Methods on page 62
Copyright © 2010, Juniper Networks, Inc.