Juniper SSG520 firewall MIP Configuration

MIP is a one-to-one bidirectional address translation (conversion) process. Generally, there are several public IP addresses and several servers that provide network services externally (servers use private IP addresses). To enable Internet users to access these servers, A one-to-one MIP ing (MIP) between public IP addresses and private IP addresses of servers can be established on the firewall at the egress of the Internet, and access control of services provided by servers can be implemented through policy implementation.

 

We use 10.17.100.250 as the virtual Internet IP address to map the Intranet host 192.168.1.2. I will not talk about the previous configuration. Let's take a look at the configuration of MIP to be configured on the firewall's Internet port, in this example, Configure port ethernet3. Go to the configuration interface of ethernet3, select the MIP option above and enter the Internet IP Address 10.17.100.250Host IP Address in the Mapped IP Address, and enter the Intranet IP Address 192.168.1.2 to be Mapped. Now, Our MIP still does not work, configure a policy for it to take effect. Select "UNtrust" to "Trust" to create a policy. In the Destination Address option, select the created MIP and click OK. Now, use 10.17.100.101 to ping 10.17.100.250. Check that the previously configured MIP has been activated. Author: "a gust of wind"