Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Administration Manual

Page: 593 / 1026

• Edit Address
—Enables you to edit the address of the selected destination.
• Delete Address —Enables you to delete a destination.
• Dest Port :
• Edit —Enables you to copy and paste the values that are within this field.
• Edit Destination Port —Enables you to edit the port range.
• Under the Action header: Select a row and right-click to perform the following actions:
• Edit Action —Enables you to edit the action set previously. If you select a pool as the
action, then you get the options to configure persistent NAT, as follows:
•
Select the
Persistent NAT
check box to implement this functionality.
• Inactivity Timeout
—Time, in seconds, that the persistent NAT binding remains in
the device’s memory when all the sessions of the binding entry are gone. When
the configured time-out is reached, the binding is removed from memory.
• Max Session Number
—Maximum number of sessions with which a persistent NAT
binding can be associated.
• Permit
—Can have one of the following values:
• Any remote host
—All requests from a specific internal IP address and port are
mapped to the same reflexive transport address.
• Target host
—All requests from a specific internal IP address and port are mapped
to the same reflexive transport address.
• Target host port
—All requests from a specific internal IP address and port are
mapped to the same reflexive transport address.
For more information on persistent NAT, see
http://www.juniper.net/techpubs/software/junos-security/junos-security10.0/junos-security-swconfig-security/
understand-persistent-nat-section.html#understand-persistent-nat-section .
•
Right-click on the
Install On
column to select a target device on which to install or
remove the NAT policy.
• View the applicable shared objects in the drop-down list in the Shared Objects for Policy
section of the window. You can add, edit, delete and search for shared objects, which
are applicable to the specific NAT rulebase.
Destination NAT Policy
Destination NAT policy is used to allow hosts from public network to communicate with
private network through the translation of the destination IP address within a packet
that is entering the Juniper Networks device. For more information on destination NAT,
see
http://www.juniper.net/techpubs/software/junos-security/junos-security10.0/
junos-security-swconfig-security/jd0e90828.html#jd0e90837 .
543 Copyright © 2010, Juniper Networks, Inc.
Chapter 11: Configuring Junos NAT Policies