Juniper NETWORK AND SECURITY MANAGER 2010.3, Руководство администратора

Страница: 590 / 1016

•
The default routing instance (
default
), which ships with the device. You can
use this routing instance, if you do not wish to configure anything new.
• Other routing instances, if you have added them previously. To add a new
routing instance, use
Object Manager > Routing Instance Objects .
• Zone
—Select the zone from the list.
In general, the list displays the zones configured within a specific device or
just the shared zones depending on whether the
Select From Device check
box is selected (default) or not and can have the following values:
• The default zone ( junos-global ), which ships with the device. You can use
this zone, if you do not wish to configure anything new.
•
Other zones, if you have added them previously. To add a new zone, use
Object Manager
>
Zone Objects
.
• Interface
—Select the interface(s) from the list. The interfaces are listed only
if you have imported the device to NSM. Hence, for modeled devices, no
interfaces are listed.
c.
Click OK .
A rule set with the specified name gets created and is displayed in the
Security Policy
window.
The next step is to add rules to the rule set. For more information, see “Adding a Rule to
a Static NAT Rule Set” on page 540.
Adding a Rule to a Static NAT Rule Set
To add a new rule to a rule set:
1.
From the
Static NAT
tab, select the rule set to which you want to add the rule.
2.
Click (
+
) at the upper left corner of the
Static NAT
tab.
3.
Select
Add Rule
to add a new rule to the selected rule set. The
New Rule
dialog box
appears.
Here, you must specify a unique name for the rule and set the conditions and the
action to be performed when the traffic matches these conditions, as follows:
a.
Enter a name, which uniquely identifies the rule within the rule set.
b.
Enter a destination address. The traffic from the source is routed to this
destination.
c.
Enter an address prefix. Enter the IP address to which the source traffic must
be translated to. As static NAT supports one to one mapping, if your source
consists of a number of hosts, then make sure that you enter an equal number
of public IP addresses in this field.
Copyright © 2010, Juniper Networks, Inc. 540
Network and Security Manager Administration Guide