Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 464 / 1016

Configuring Destination NAT Objects
A destination NAT object consists of a user-defined address pool and is used during
destination address translation. You can use this object while configuring a rule so that
when the rule is matched, the destination IP address of the packet is translated to an IP
address from this pool.
You can add, edit, delete, and search for a destination NAT object from Object Manager .
For more information, see the following sections:
• Adding a Destination NAT Object on page 414
• Editing a Destination NAT Object on page 415
•
Deleting a Destination NAT Object on page 416
Adding a Destination NAT Object
To add a destination NAT object:
1.
Select
Object Manager
>
Junos NAT Objects
>
Destination NAT
. The
Destination NAT
dialog box appears. You can add, edit, delete, or search for a destination NAT object
using the icons at the top of this dialog box.
2.
Select ( + ) to create a new destination NAT object. The New JunosDestination NAT
dialog box appears:
•
Enter a name, color, and comment for the new destination NAT object.
•
Select (
+
) to configure the parameters for the new destination NAT object.
The
New – Junos Destination NAT
dialog box appears. Here, you must select the
device that performs the translation and define the address pool.
3.
Select a device from the
Device
drop-down list.
•
The devices are listed only if you have previously added these devices to NSM. To
add a device, use the
Device Manager
.
•
If a device is not selected, you cannot configure the
Proxy-ARP
and
Junosdestination-nat
fields.
4.
If the proxy ARP functionality is required, select the IP address of the interface, which
accepts the ARP requests, from the
Proxy ARP
drop-down list. If there are no values
listed, select (
+
) to configure a new value. The
New Interface
dialog box appears.
Specify the logical interface on which to configure proxy ARP and its details. For
more information, see “Configuring Proxy ARP” on page 415.
5.
Select ( + ) next to Junosdestination-nat to configure the address pool. The New Pool
dialog box appears.
You will see a list of values to select from the drop-down list if you have previously
configured address pools.
Table 42 on page 415 lists the fields that are available and the action you need to
perform on each fields.
Copyright © 2010, Juniper Networks, Inc. 414
Network and Security Manager Administration Guide