SRX

last person joined: yesterday 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.

  • 1.  source nat

    Posted 08-10-2015 06:29

    Hi guys, 

     

    I am missing something, I try to do a source nat but I always end up sourcing through the same ip, can you check the syntax ?

     

    replaced the public ips with $public_ip_1/32 and $public_ip_2/32

     

    web_dev always snat through $public_ip_1 instead of $public_ip_2

     

     

    set security nat source pool default-nat address $public_ip_1/32
set security nat source pool web01_dev address $public_ip_2/32
set security nat source rule-set internet-nat from zone trust
set security nat source rule-set internet-nat to zone untrust
set security nat source rule-set internet-nat rule any-to-any match source-address 10.8.0.0/16
set security nat source rule-set internet-nat rule any-to-any match destination-address 0.0.0.0/0
set security nat source rule-set internet-nat rule any-to-any then source-nat pool default-nat
set security nat source rule-set internet-nat rule web01_dev match source-address 10.8.40.103/16
set security nat source rule-set internet-nat rule web01_dev match destination-address 0.0.0.0/0
set security nat source rule-set internet-nat rule web01_dev then source-nat pool web01_dev

     

    thanks,

    Dan



  • 2.  RE: source nat
    Best Answer

    Posted 08-10-2015 07:26

    oh figured out, I had to rearange the rule order 🙂