Interface Network Address Translation Using Dips - Juniper NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01 Manual
Configuring screenos devices guide
Hide thumbs
Also See for NETWORK AND SECURITY MANAGER 2010.4 - CONFIGURING SCREENOS DEVICES GUIDE REV 01:
- Manual (340 pages) ,
- Administration manual (1026 pages) ,
- Installation manual (244 pages)
Table of Contents
Advertisement
Related
Documentation
Interface Network Address Translation Using DIPs
Related
Documentation
Copyright © 2010, Juniper Networks, Inc.
Click the Add icon to display the Virtual IP dialog box. Enter the Virtual IP as 1.1.1.10.
Click the Add icon to display the VIP mapping dialog box. Configure the following
13.
options:
For Virtual Port, enter 80.
For Mapped IP, enter 10.1.1.10.
For Mapped Service, enter HTTP.
Click OK to save the VIP mapping, and then click OK to save the VIP.
Click OK to save your changes to the interface, and then click
changes to the device.
In the navigation tree, select Object Manager > NAT Objects > VIP.
14.
Click the Add icon to display the new Global VIP dialog box.
15.
Configure the Global VIP.
16.
Configure a firewall rule to route inbound HTTP traffic on port 80 to the VIP address.
17.
Interface Network Address Translation Using VIPs on page 65
Interface Network Address Translation Methods on page 62
Mapping Predefined and Custom Services in a VIP on page 65
A dynamic IP (DIP) pool is a range of IP addresses. The security device can dynamically
or deterministically use these IP addresses when performing network address translation
on the source IP address (NAT-src) in IP packet headers.
If the range of addresses in a DIP pool is in the same subnet as the interface IP address,
the pool must exclude the interface IP address, router IP addresses, and any mapped
IP (MIP) or virtual IP (VIP) addresses that might also be in that subnet.
If the range of addresses is in the subnet of an extended interface, the pool must exclude
the extended interface IP address.
You can assign DIP pools to physical interfaces and subinterfaces for network and VPN
traffic, and tunnel interfaces for VPN tunnels only.
Dip pools can now be defined on VLAN interface when the device running on ScreenOS
6.2 is in Transparent mode.
Example: Enabling Multiple Hosts Using Port Address Translation (NSM Procedure)
on page 68
Example: Translating Source IP Addresses into a Different Subnet (NSM Procedure)
on page 69
Chapter 3: Network Settings
OK
to save your
67
Advertisement
Table of Contents
