Juniper NETWORK AND SECURITY MANAGER 2010.3, Administration Manual

Page: 586 / 1016

To configure a destination NAT policy, the first step is to add a destination NAT rulebase
to this policy. For more information on adding a destination NAT rulebase to a policy, see
“Adding a Destination NAT Rulebase” on page 536.
Adding a Destination NAT Rulebase
To add a destination NAT rulebase:
1.
From
Policy Manager
, select
Policies
.
2.
Select the policy to which you want to add a destination NAT rulebase. The
Security
Policy
window appears.
If no policies are listed, then you must create a new policy and proceed to add a
rulebase to it.
3.
Click ( + ) at the upper right of the Security Policy window.
Select NAT Policies > Add Destination NAT Rulebase . The Destination NAT tab appears
in the policy.
The next step is to add rule sets to this rulebase. For more information on adding a
destination NAT rule sets to the rulebase, see “Adding a Rule Set to a Destination NAT
Rulebase” on page 536.
Adding a Rule Set to a Destination NAT Rulebase
To add a rule set to the destination NAT rulebase:
1.
Click (
+
) at the upper left corner of the
Destination NAT
tab.
2.
Select
Add Rule Set
to add a new rule set. The
New Rule Set
dialog box appears.
Here, you must specify a unique name for the rule set and specify the source through
which the traffic enters the private network, as follows:
a.
Enter a name in the
Name
field.
b.
Select the source from the Source drop-down list.
Source can be one of the following:
• Routing Instance
—Select the routing instance from the list.
In general, the list displays the routing instances configured within a specific
device or just the shared routing instances depending on whether the
Select
From Device
check box is selected (default) or not and can have the following
values:
• The default routing instance (
default
), which ships with the device. You can
use this routing instance, if you do not wish to configure anything new.
• Other routing instances, if you have added them previously. To add a new
routing instance, use
Object Manager
>
Routing Instance Objects
.
• Zone —Select the zone from the list.
Copyright © 2010, Juniper Networks, Inc. 536
Network and Security Manager Administration Guide