Juniper NETWORK AND SECURITY MANAGER 2010.3, Руководство администратора

Страница: 589 / 1016

Static NAT Policy
Static NAT facilitates address translation in both directions (incoming and outgoing)
and the characteristics are:
•
A unique public IP address must be allocated to each private IP address
•
Address pool is not required as there is one to one mapping of the public to private IP
addresses
Adding a Static NAT Rulebase
To add a static NAT rulebase:
1.
From Policy Manager , select Policies .
2.
Select the policy to which you want to add a static NAT rulebase. The Security Policy
window appears.
If no policies are listed, then you must create a new policy and proceed to add a
rulebase to it.
3.
Click (
+
) at the upper right of the
Security Policy
window.
Select
NAT Policies
>
Add Static NAT Rulebase
. The
Static NAT
tab appears in the
policy.
The next step is to add rule sets to this rulebase. For more information on adding a static
NAT rule sets to the rulebase, see “Adding a Rule Set to a Static NAT Rulebase” on
page 539.
Adding a Rule Set to a Static NAT Rulebase
To add a rule set to the static NAT rulebase:
1.
Click ( + ) at the upper left corner of the Static NAT tab.
2.
Select Add Rule Set to add a new rule set. The New Rule Set dialog box appears.
Here, you must specify a unique name for the rule set and the source from where
the traffic originates, as follows:
a.
Enter a name in the Name field.
b.
Select the source from the
Source
drop-down list.
Source can be one of the following:
• Routing Instance —Select the routing instance from the list.
In general, the list displays the routing instances configured within a specific
device or just the shared routing instances depending on whether the
Select
From Device check box is selected (default) or not and can have the following
values:
539 Copyright © 2010, Juniper Networks, Inc.
Chapter 11: Configuring Junos NAT Policies