Junos
Junos

Basic NAT44 Configuration on MX Router

[ Edited ]
‎08-17-2018 09:14 AM

HI,

I am following this guide  to configure basic nat44 on MX 104. But I am unable make  it work.  Even the inside interface become icmp unreachable when service set is applied. Can anyone guide me what's going wrong here. Following is my configuration. 

 

# show services nat 
pool POOL-1 {
address 10.10.10.11/32;
}
rule R1 { match-direction input; term T1 { from { source-address { 192.168.105.2/32; } destination-address { any-ipv4; } } then { translated { source-pool POOL-1; translation-type { basic-nat44; }}}}}

# show services service-set SS1
nat-rules R1;
interface-service {
service-interface ms-1/2/0;
}

# show interfaces ms-1/2/0
unit 0 {
family inet;
}

# show interfaces irb unit 105
description Inside Interface;
family inet {
service {
input {
service-set SS1;
}
output {
service-set SS1;
}
}
address 192.168.105.1/30;
}
# run show services nat mappings summary    

Service Interface:                                          ms-1/2/0  
Total number of address mappings:                           0         
Total number of endpoint independent port mappings:         0         
Total number of endpoint independent filters:               0     

#from client 

 

> ping 192.168.105.1 count=3 src-address=192.168.105.2
  SEQ HOST                                     SIZE TTL TIME  STATUS                                                                                                        
    0 192.168.105.1                                           timeout                                                                                                       
    1 192.168.105.1                                           timeout                                                                                                       
    2 192.168.105.1                                           timeout                                                                                                       
    sent=3 received=0 packet-loss=100% 

> ping 8.8.8.8 count=3 src-address=192.168.105.2             
  SEQ HOST                                     SIZE TTL TIME  STATUS                                                                                                        
    0 8.8.8.8                                                 timeout                                                                                                       
    1 8.8.8.8                                                 timeout                                                                                                       
    2 8.8.8.8                                                 timeout                                                                                                       
    sent=3 received=0 packet-loss=100% 

 

1 REPLY 1
Highlighted
Junos

Re: Basic NAT44 Configuration on MX Router

‎08-17-2018 12:24 PM

Hello,

AFAIK, translation of locally-generated OR locally-terminated traffic using INTERFACE-STYLE service-set (that's what You are doing) is not supported.

Please ping something THROUGH this router to see results.

HTH

Thx

Alex

_____________________________________________________________________

Please ask Your Juniper account team about Juniper Professional Services offerings.
Juniper PS can design, test & build the network/part of the network as per Your requirements

+++++++++++++++++++++++++++++++++++++++++++++

Accept as Solution = cool !
Accept as Solution+Kudo = You are a Star !