SRX

last person joined: 2 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  How to access Web server behind SRX

    Posted 11-29-2016 05:19

    Hello folks,

     

    I have hosted one web server front ended with SRX firewall and SRX firewall untrust interface has public IP address reachable through internet. Now, how to access from internet the web server from internet?

     

     

    I understand, we need to enable NAT, but how exactly the IP address on SRX be mapped to Webserver?

    Do I need to do anything else? 

     

     

    Please suggest, CLI information would indeed be helpful.

     

    Thanks,

    Shirish.

     

     

     

     

     

     



  • 2.  RE: How to access Web server behind SRX
    Best Answer

     


  • 3.  RE: How to access Web server behind SRX

    Posted 11-29-2016 07:04

    Thanks Suraj for your response, this was truely helpful.

     

    I have just one query..the concept considers incoming traffic from internet to be of Public IP   1.1.1.200/32 .

    I intend to keep this generic for any public destination IP address coming from internet to SRX device.

     

    In this case, what should be the config, particularly the Proxy-arp?

     

    Could you please help suggest?

     

    Thanks,

    Shirish.

     

     

     

     

     

     



  • 4.  RE: How to access Web server behind SRX

    Posted 11-29-2016 09:35

    The example is using 1.1.1.200 as the destination address.  Replace this IP with the public IP address you would like to use to access the web server.  The proxy arp is used for the device to respond to ARP requests for the public IP address, as it is not configured on the interface itself.