How the Juniper netscreen firewall to do the port mapping of the internal and external network

NetScreen, for example, enters the Web administration interface, which operates as follows:

1. Increase public network VIP

Network

Interfaces

ETHERNET0/2 211.136.199.14/28 Edit

Vip

*add Virtual IP Address

2. Binding intranet IP, port

*new VIP Service

Select Map to service if no need to add Service first

Fill in map to IP

Select Server Auto Detection

3. Set Policy

Policies

Untrust>trust

*new

Destination Address Select VIP

Select Service

Select logging

#如何添加Service

Objects

Services

Custom

*new

Service Timeout Use protocol default

Select protocol Type TCP/UDP

Source Port 0 High 65535

Destination port to map

Different ports of the same public network IP can be mapped to different IP ports in the network

This article from the "Operation and maintenance work Struggle" blog, please be sure to retain this source http://yanghuawu.blog.51cto.com/2638960/662453