01-25-2010 07:31 PM - edited 01-26-2010 06:03 AM
Hello - I'm new to the Juniper world, so please bear with me.
I have an edge router and a firewall - I'd like to replace both with my shiny new SRX650. Basically what I want is 3 interfaces:
ge-0/0/9: management interface
ge-0/0/1: /30 address (uplink to ISP)
ge-0/0/2: /24 address (DMZ private IP space)
ge-0/0/3: /16 address (my internal network)
Now, I also have a /27 public address block... being that I dont have any additional interfaces to assign this to, can I assign it to loopback interfaces, and NAT the loopback with servers on ge-0/0/2? A primer config would be extremely helpful.
Thank you in advance.
01-26-2010 02:42 PM
You can use the /27 on the ge-0/0/1 in static or destination nat rules to the servers, no need for the loopback!
01-27-2010 01:09 AM
Your next-hop router on the ge-0/0/1 interface needs to route your /27 IP range to the /30 IP address of your firewall. Then you can just use these addresses in your NAT configuration.
01-29-2010 11:19 AM
Exactly that's how it's done! thanks Sloefke.