Below provides a short guide in configuring source NAT with an address pool on a Juniper SRX.
The following example creates a pool with a 10.1.1.0/24 network. This pool of addresses are then used during the translation of source addresses.
In addition to the pool we also configure the following options:
set address-persistent – this ensures that PAT translations for a host are translated through the same IP.
set port-randomization disable – as this feature can use a large amount of resource it is disabled.
root@srx100# edit security nat source
[edit security nat source]
root@srx100# set address-persistent
root@srx100# set port-randomization disable
root@srx100# set pool nat-pool address 10.1.1.0/24
root@srx100# set rule source-nat-pool-rule match source-address 0.0.0.0
root@srx100# set rule source-nat-pool-rule then source-nat pool nat-pool
- How to Configure a BIND Server on Ubuntu - March 15, 2018
- What is a BGP Confederation? - March 6, 2018
- Cisco – What is BGP ORF (Outbound Route Filtering)? - March 5, 2018
Want to become an IT Security expert?
Here is our hand-picked selection of the best courses you can find online:
Internet Security Deep Dive course
Complete Cyber Security Course – Hackers Exposed
CompTIA Security+ (SY0-601) Certification Complete course
and our recommended certification practice exams:
AlphaPrep Practice Tests - Free Trial