Juniper NETWORK AND SECURITY MANAGER 2010.4 - ADMININISTRATION GUIDE REV1, Руководство администратора

Страница: 595 / 1026

In general, the list displays the zones configured within a specific device or just
the shared zones depending on whether the
Select From Device
check box is
selected (default) or not and can have the following values:
• The default zone ( junos-global ), which ships with the device. You can use this
zone, if you do not wish to configure anything new.
•
Other zones, if you have added them previously. To add a new zone, use
Object
Manager
>
Zone Objects
.
• Interface
—Select the interface(s) from the list. The interfaces are listed only if
you have imported the device to NSM. Hence, for modeled devices, no interfaces
are listed.
c.
Click OK .
A rule set with the specified name gets created and is displayed in the
Security Policy
window.
The next step is to add rules to the rule set. For more information, see “Adding a Rule
to a Destination NAT Rule Set” on page 545.
Adding a Rule to a Destination NAT Rule Set
To add a new rule to a rule set:
1.
From the Destination NAT tab, select the rule set to which you want to add the rule.
2.
Click ( + ) at the upper left corner of the Destination NAT tab.
3.
Select Add Rule to add a new rule to the selected rule set. The New Rule dialog box
appears.
Here, you must specify a unique name for the rule and set the conditions and the
action to be performed when the traffic matches these conditions, as follows:
a.
Enter a name, which uniquely identifies the rule within the rule set.
b.
Select the source address from the list. The addresses listed here represent the
hosts that are in the public network.
c.
Select the destination address from the list. This address represents the public IP
address through which the traffic enters the private network.
d.
Select a destination port. This is the port through which the traffic enters the private
network.
e.
Specify one of the following actions:
• Off
—Do not perform destination NAT.
545 Copyright © 2010, Juniper Networks, Inc.
Chapter 11: Configuring Junos NAT Policies