Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 589 / 1026

CHAPTER 11
Configuring Junos NAT Policies
Network address translation (NAT) policies determine how the network address
information within packet headers gets translated. Either or both source and destination
addresses in a packet may be translated. The translation can include IP addresses as
well as port numbers.
The types of NAT policies that are supported on Juniper Networks devices are: Source
NAT policy, Destination NAT policy, and Static NAT policy.
To configure a NAT policy on your network:
1.
Select a policy.
2.
Add a NAT rulebase to this policy.
A rulebase determines the overall direction of the traffic to be processed and consists
of rule sets.
3.
Add a rule set to this NAT rulebase.
A rule set consists of a general set of matching conditions for traffic. If the traffic
matches these conditions, then that traffic is selected for NAT. A rule set can contain
multiple rules.
4.
Add a rule to this rule set.
Rules are part of a NAT rule set and specify the traffic to be matched and the action
to be performed when the traffic matches the rule.
5.
Push this policy on a device that performs the NAT.
This chapter contains the following sections:
• Source NAT Policy on page 539
• Destination NAT Policy on page 543
•
Static NAT Policy on page 547
Source NAT Policy
Source NAT policy is used to allow hosts with private IP addresses to access a public
network through the translation of the source IP address within a packet leaving the
Juniper Networks device. For more information on source NAT, see
539 Copyright © 2010, Juniper Networks, Inc.