SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  What is the behavior if i configured address shifting plus overflow-pool ?

    Posted 08-20-2015 02:26

    See below config:

     

    root@srx# show security nat
    source {
    pool test-p {
    address {
    207.17.137.1/32 to 207.17.137.254/32;
    }
    host-address-base 10.1.10.5/32;
    port no-translation;
    overflow-pool overlap-p;
    }
    pool overlap-p {
    address {
    207.17.137.255/32;
    }
    }
    }

     

    when the 207.17.137.1/32 to 207.17.137.254/32 are used up, the 207.17.137.255 will be used as one-to-one mapping or PAT ?



  • 2.  RE: What is the behavior if i configured address shifting plus overflow-pool ?
    Best Answer

    Posted 08-20-2015 03:50

    Hello there,

    Pool configured WITHOUT "port no-translation" knob is a NAPT pool.

    In Your example 

     

    pool overlap-p {
address {
207.17.137.255/32;
}

    - pool "overlap-p" will be used for "PAT".

    HTH

    Thanks

    Alex

    P.S. Next time please try to use RFC 2633 terminology ( https://tools.ietf.org/html/rfc2663 ) : PAT is equivalent to NAPT.



  • 3.  RE: What is the behavior if i configured address shifting plus overflow-pool ?

    Posted 08-20-2015 04:06

    Got it, thanks a lot. Alex 🙂