JuniperNetScreen基于源NAT转换

1.NAT-Src with PAT Enabled

让客户满意是我们工作的目标，不断超越客户的期望值来自于我们对这个行业的热爱。我们立志把好的技术通过有效、简单的方式提供给客户，将通过不懈努力成为客户在信息化领域值得信任、有价值的长期合作伙伴，公司提供的服务项目有：国际域名空间、虚拟空间、营销软件、网站建设、四平网站维护、网站推广。

CLI：

set int eth2 zone trust

set int eth2 ip 10.1.1.1/24

set int eth2 nat

set int eth4 zone untrust

set int eth4 ip 1.1.1.1/24

set int eth4 route

set int eth4 dip 5 1.1.1.30 1.1.1.30

set policy from trust to untrust any any any nat src dip-id 5 permit log

2.NAT-Src with PAT Disabled

CLI：

set int eth2 zone trust

set int eth2 ip 10.1.1.1/24

set int eth2 nat

set int eth4 zone untrust

set int eth4 ip 1.1.1.1/24

set int eth4 route

set int eth4 dip 6 1.1.1.50 1.1.1.150 fix-port

set policy from trust to untrust any any any nat src dip-ip 6 permit log

3.NAT-Src with Address Shifting

CLI:

set int eth2 zone trust

set int eth2 ip 10.1.1.1/24

set int eth2 nat

set int eth4 zone untrust

set int eth4 ip 1.1.1.1/24

set int eth4 ip route

set int eth4 dip 10 shift-from 10.1.1.11 to 1.1.1.101 1.1.1.105

set address trust host1 10.1.1.11/32

set address trust host2 10.1.1.12/32

set address trust host3 10.1.1.13/32

set address trust host4 10.1.1.14/32

set address trust host5 10.1.1.15/32

set group address trust group1 add host1

set group address trust group1 add host2

set group address trust group1 add host3

set group address trust group1 add host4

set group address trust group1 add host5

set policy from trust to untrust group1 any any nat src dip-id 10 permit log

3.NAT-Src Without DIP

CLI :

set int eth2 zone trust

set int eth2 ip 10.1.1.1/24

set int eth2 nat

set int eth4 zone untrust

set int eth4 ip 1.1.1.1/24

set int eth4 route

set policy from trust to untrust any any any nat src  permit log

网站名称：JuniperNetScreen基于源NAT转换
文章起源：http://shouzuofang.com/article/pepjjp.html