@MonaxGT wrote:
Hi
In your topology your request-host behind Building A?
Can you give config from Building B?
Sorry, I missed your other question:
I'm requesting the page from site C on the internet. So, for the sake of arguement, it's coming from 3.3.3.3 and is requesting http://1.1.1.1:1234 which I want to NAT to 10.201.22.106:80 which is over the VPN.
Other details I've missed off:
Building A:
Zone Internet: Interface ge-0/0/0.0 with IP address 1.1.1.1/30
Zone Internal: Interface vlan.10-20 with IP range 10.200.10.0/24, 10.200.11.0/24....... 10.200.20.0/24
Zone VPN: Interface st0.0 with IP 10.0.0.1/30
Building B:
Zone Internet: Interface ge-0/0/0.0 with IP address 2.2.2.2/30
Zone Internal: Interface vlan.10-40 with IP range 10.201.10.0/24, 10.201.11.0/24....... 10.201.40.0/24
Zone VPN: Interface st0.0 with IP 10.0.0.2/30
From Router A I can telnet to the web server on 10.201.22.106:80
On Router A I have a policy from Internet to VPN for junos-http
On Router B I have a policy from VPN to Internal for junos-http
Is there a way I can debug this better?
Thanks.
Andrew.