Juniper NetScreen based on source NAT translation

1.nat-src with PAT Enabled

Cli:

Set int eth1 Zone Trust

Set int eth1 IP 10.1.1.1/24

Set int eth1 NAT

Set int Eth3 Zone Untrust

Set int ETH3 IP 1.1.1.1/24

Set int Eth3 route

Set int Eth3 Dip 5 1.1.1.30 1.1.1.30

Set policy from trust to untrust any any any NAT src Dip-id 5 Permit Log

2.nat-src with PAT Disabled

Cli:

Set int eth1 Zone Trust

Set int eth1 IP 10.1.1.1/24

Set int eth1 NAT

Set int Eth3 Zone Untrust

Set int ETH3 IP 1.1.1.1/24

Set int Eth3 route

Set int Eth3 Dip 6 1.1.1.50 1.1.1.150 Fix-port

Set policy from trust to untrust any any any NAT src Dip-ip 6 Permit Log

3.NAT-SRC with Address shifting

Cli:

Set int eth1 Zone Trust

Set int eth1 IP 10.1.1.1/24

Set int eth1 NAT

Set int Eth3 Zone Untrust

Set int ETH3 IP 1.1.1.1/24

Set int eth3 IP route

Set int Eth3 dip Shift-from 10.1.1.11 to 1.1.1.101 1.1.1.105

Set Address Trust host1 10.1.1.11/32

Set Address Trust Host2 10.1.1.12/32

Set Address Trust Host3 10.1.1.13/32

Set Address Trust Host4 10.1.1.14/32

Set Address Trust Host5 10.1.1.15/32

Set Group Address Trust group1 add host1

Set Group Address Trust group1 add host2

Set Group Address Trust group1 add host3

Set Group Address Trust group1 add Host4

Set Group Address Trust group1 add HOST5

Set policy from trust to untrust group1 any any NAT src Dip-id permit Log

3.NAT-SRC without DIP

Cli:

Set int eth1 Zone Trust

Set int eth1 IP 10.1.1.1/24

Set int eth1 NAT

Set int Eth3 Zone Untrust

Set int ETH3 IP 1.1.1.1/24

Set int Eth3 route

Set policy from trust to untrust any any any Nat src permit log

This article is from the "Chj Migrant Workers" blog, please be sure to keep this source http://3155099.blog.51cto.com/3145099/1611600

Juniper NetScreen based on source NAT translation