JuniperNetScreen基于源NAT转换-创新互联

1.NAT-Src with PAT Enabled

创新互联建站总部坐落于成都市区，致力网站建设服务有网站设计、成都网站建设、网络营销策划、网页设计、网站维护、公众号搭建、小程序制作、软件开发等为企业提供一整套的信息化建设解决方案。创造真正意义上的网站建设，为互联网品牌在互动行销领域创造价值而不懈努力！

CLI：

set int eth2 zone trust

set int eth2 ip 10.1.1.1/24

set int eth2 nat

set int eth4 zone untrust

set int eth4 ip 1.1.1.1/24

set int eth4 route

set int eth4 dip 5 1.1.1.30 1.1.1.30

set policy from trust to untrust any any any nat src dip-id 5 permit log

2.NAT-Src with PAT Disabled

CLI：

set int eth2 zone trust

set int eth2 ip 10.1.1.1/24

set int eth2 nat

set int eth4 zone untrust

set int eth4 ip 1.1.1.1/24

set int eth4 route

set int eth4 dip 6 1.1.1.50 1.1.1.150 fix-port

set policy from trust to untrust any any any nat src dip-ip 6 permit log

3.NAT-Src with Address Shifting

CLI:

set int eth2 zone trust

set int eth2 ip 10.1.1.1/24

set int eth2 nat

set int eth4 zone untrust

set int eth4 ip 1.1.1.1/24

set int eth4 ip route

set int eth4 dip 10 shift-from 10.1.1.11 to 1.1.1.101 1.1.1.105

set address trust host1 10.1.1.11/32

set address trust host2 10.1.1.12/32

set address trust host3 10.1.1.13/32

set address trust host4 10.1.1.14/32

set address trust host5 10.1.1.15/32

set group address trust group1 add host1

set group address trust group1 add host2

set group address trust group1 add host3

set group address trust group1 add host4

set group address trust group1 add host5

set policy from trust to untrust group1 any any nat src dip-id 10 permit log

3.NAT-Src Without DIP

CLI :

set int eth2 zone trust

set int eth2 ip 10.1.1.1/24

set int eth2 nat

set int eth4 zone untrust

set int eth4 ip 1.1.1.1/24

set int eth4 route

set policy from trust to untrust any any any nat src  permit log

另外有需要云服务器可以了解下创新互联scvps.cn，海内外云服务器15元起步，三天无理由+7*72小时售后在线，公司持有idc许可证，提供“云服务器、裸金属服务器、高防服务器、香港服务器、美国服务器、虚拟主机、免备案服务器”等云主机租用服务以及企业上云的综合解决方案，具有“安全稳定、简单易用、服务可用性高、性价比高”等特点与优势，专为企业上云打造定制，能够满足用户丰富、多元化的应用场景需求。

本文名称：JuniperNetScreen基于源NAT转换-创新互联
网页网址：http://mswzjz.cn/article/djpsjj.html