Juniper防火墙NAT（最新整理）.pdfVIP

Juniper SRX 防火墙配置 1.源PAT-NAT 应用 langhuashijie In Xian 应用在公网只有一个公有地址或者私有地址，而对LAN 端进行上互联网的情况PAC 形式。 主要配置命令: //蓝字引用互联网51CTO 相关内容,仅限引用,在此说明 配置策略，让Inside 能正常访问Outside ！！ edit security policies from-zone Inside1 to-zone Outside policy Permit-ALL set match source-address any set match destination-address any set match application any set then permit set then log session-init session-close 配置Log edit system syslog file nat-log set any any set match RT_FLOW_SESSION 配置NAT ： edit security nat source rule-set NAT-Policy //rule-set 一系列NAT 的集合 set from zone Inside1 set to zone Outside edit rule Inside1-Outside-Interface-NAT //rule set match source-address /24 set match desnation-address /24 //可选配置，上网就不需要了 set then source-nat interface commit //提交并应用！ show security flow session show log nat-log //查看NAT 转换项！！ show security nat source rule all //查看NAT 转换类型.. 配置如下: system { host-name LangHuaShiJieSrx; //设定SRX 名称.域名.ROOT 密码 domain-name ; time-zone Asia/Shanghai; root-authentication { encrypted-password $1$uufFaEZU$9oL2eU.JcXinZMJ0zxBEK/; ## SECRET-DATA } login { //配置一定权限用户 user langhuashijie { full-name Renwenbinlanghuashijie; uid 2000; class super-user; authentication { encrypted-password $1$2fH7.aUI$Eti93B.QmW6qcxnFIHGtB1; ## SECRET-DATA } } } services { //开户服务 Set system service ftp ssh telnet webmanagement frome G0/0/0 ftp; ssh; telnet { connection-limit 5; } web-management { http { interface ge-0/0/0.0; }