persistant nat on SRX?

[entrada]

Hi,

can anybody explain to me what this commands do?

edit security nat source rule-set a rule a then source-nat pool persistent-nat permit]

set any-remote-host -or-

set  target-host -or-

set target-host-port

Where is the differnce, what does it do?

Thank you

[colemtb]

http://www.juniper.net/techpubs/software/junos-security/junos-security10.0/junos-security-swconfig-s...

[entrada]

I think I dont get it.

so, does it mean that you can establish connection from external to internal to my NATed IP-Address? sounds a bit like static NAT for me....can anybody show me an example when to use this kind of nat?

Thank you very much.

[SSHSSH]

Hi entrada ,

It is not like static nat

Enabling persistent nat   ensures that the Assigned source ip from the pool will remain the Same

Some applications  require connecting  user to have the same source ip  even if it has multiple connections

**************  Click on the button saying " Accept  as Solution"  if  My Post solved your problem  **************

[hilehoffer@gmail.com]

I think persistent nat is similar to static nat, and you are referring to source nat with "address-persistent."  I myself am thinking persistent nat any remote host is just about the same as static nat..  ONly difference is source nat can be matched to a specific context.