Screen OS

last person joined: 8 months ago 

This is a legacy community with limited Juniper monitoring.

  • 1.  Will a MIP apply NAT-src by Default - ScreenOS 6.1 SSG-320M

    Posted 03-04-2010 03:19


    MIP 10.0.0.1 (untrust)  --->   192.168.0.1 (trust)


    So given the above flow, traffic coming in from the outside targetting 10.0.0.1, the fw will translate the destination to 192.168.0.1   All good and no problems with that.


    When host 192.168.0.1 (trust) initiates a connection to dst 10.0.0.1(untrust), will the src addr get translated to 10.0.0.1 without any further configuration changes after the MIP has been applied?. This is NAT-src right?


    many thanks

    anawaz



  • 2.  RE: Will a MIP apply NAT-src by Default - ScreenOS 6.1 SSG-320M
    Best Answer

    Posted 03-04-2010 05:25

    Yes  you are right

    MIP is a bidirectional Natting



  • 3.  RE: Will a MIP apply NAT-src by Default - ScreenOS 6.1 SSG-320M

    Posted 03-04-2010 05:33

    thank you sshssh Smiley Happy

    good name you got there lol



  • 4.  RE: Will a MIP apply NAT-src by Default - ScreenOS 6.1 SSG-320M

    Posted 05-28-2010 13:01

    Hi anawaz  ,

     

    But donot forget that you will need a policy at the reverse direction   trsut  to untrust