1:1 NAT by prefix

[bofh666ie]

Hi all,

for a renumbering project, I'm trying to figure out whether it is possible to transparently NAT a range of prefixes on J-series, using either JUNOS or JUNOS/ES. Any documentation or config example mentions only single addresses for the inbound direction.

example: 1.2.3.0/24 <-NAT-> 2.3.4.0/24 so that (ie. 1.2.3.1 <-> 2.3.4.1 ... 1.2.3.254 <-> 2.3.4.254)

Isthis possible and if yes, can anyone please point me at documentation for this?

thanks in advance,

sascha

[rkim · Accepted solution]

Yes this is possible with static NAT on JUNOS with enhanced services. Check out this application note:

http://kb.juniper.net/kb/documents/public/junos_es/JUNOS_ES_VPN_with_Overlapping_Subnets.pdf

This app note refers to using static NAT with VPN tunnels. But in your case you can ignore the VPN tunnel aspect and focus on the static NAT configuration example.

-Richard

[bofh666ie]

Richard,

many thanks, the config according to your doc works great. 

Regards,

  Sascha