port forwarding without destination address

[Tomdolo]

Hi,

Is it possible in Junos not to specify the destination address when doing port forwarding?

I try to translate this statement from ScreenOS into Junos:

set interface untrust vip untrust 25 "SMTP" 192.168.168.9

rule-set port-forwarding {
    from zone untrust;
    rule r1 {
        match {
            destination-port 25;
            ## Warning: missing mandatory statement(s): 'destination-address'
        }
        then {
            destination-nat pool s1-SMTP;
        }
    }
}

Regards,

Tom

[arizvi]

Hi,

Can you please provide the "get conf | i untrust" from the screenOs box.

Thanks

Atif

[routeruser]

If you do not care about the address in the match condition for destination address provide "0.0.0.0/0"

This will match any address and not care about teh specific prefix .

[Tomdolo]

Thanks routeruser, but how to configure the proxy-arp?

commit check
[edit security nat proxy-arp interface pp0.0]
  'address 0.0.0.0/0'
    IP address 0.0.0.0 is invalid
error: configuration check-out failed

Regards,

Tom

[Prathi]

try this, not proxy arp needed if you are using the interface IP.

ule-set port-forwarding {
    from zone untrust;
    rule r1 {
        match {
            destination-port 25;
            destination-address 0.0.0.0/0;
        }
        then {
            destination-nat pool s1-SMTP;
        }
    }
}

-Pra