NetScreen Firewall mappings and virtual IP addresses

MIP (mapped IP)

A mapped IP (MIP) is a direct one-to-one mapping from one IP address to another IP address. The NetScreen device forwards an inward flow of information destined for MIP to a host addressed by MIP. In fact, MIP is a static target address translation that maps the destination IP address in the IP packet header to another static IP address. When the MIP host initiates the outbound information flow, the NetScreen device converts the source IP address of the host to the source IP address of the MIP address. This symmetric bidirectional conversion differs from the source and destination address conversions

The specific actions are as follows:

Select the Untrust interface under the Network=>interface interface, click Edit, enter the editing interface and click MIP

In policy, create a untrust to trust

Point Untrust The source address select any

Trust's destination address select the MIP just established

Action Selection Permit