Security

 View Only
last person joined: 21 hours ago 

Ask questions and share experiences with Juniper Connected Security. Discuss Advanced Threat Protection, SecIntel, Secure Analytics, Secure Connect, Security Director, and all things related to Juniper security technologies.
  • 1.  Configuration DVR - IP DYNAMIC - DYNDNS

    Posted 03-27-2021 16:04

    Olá amigos da comunidade. tudo bom ?

    Estou com um problema, acredito que seja muito fácil para você. LOL

    Eu tenho um Juniper SRX300 e eu preciso para liberar o acesso externo à Segurança Câmeras DVR.

    Segue o cenário criado: SRX300

    1. Configurei DNS Dinâmico e está tudo OK, identifica meu ip pois não tenho link de ip fixo no momento.

    2. Configure o destino NAT de segurança - Eu configurei o IP e a porta do DVR. E eu configurei o Destination NAT POOL.

    3. Configurar segurança Regras de política de segurança Eu configurei as regras de segurança.

    Mesmo assim não funciona, alguém pode me ajudar?

    Muito obrigado.



    ------------------------------
    Leandro Gomes
    ------------------------------


  • 2.  RE: Configuration DVR - IP DYNAMIC - DYNDNS

    Posted 03-28-2021 06:05
    If you post your configuration stanzas we can have a look and see what may be the mis match.
    Just change the public ip to something generic.

    ------------------------------
    Steve Puluka BSEET - Juniper Ambassador
    IP Architect - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
    http://puluka.com/home
    ------------------------------



  • 3.  RE: Configuration DVR - IP DYNAMIC - DYNDNS

    Posted 03-28-2021 11:46
    Link Principal Port 4
    Link Backup Port 5


    Services

    dynamic-dns {
    client my_company.dyndns.org {
    server dyndns;
    username my_user;
    password "my_password";
    interface ge-0/0/4.0;
    }
    }




    nat {
    source {
    rule-set NAT {
    from zone [ TRUST junos-host ];
    to zone [ UNTRUST-ISP1 UNTRUST-ISP2 ];
    rule TRUST-UNTRUST {
    match {
    source-address 0.0.0.0/0;
    destination-address 0.0.0.0/0;
    }
    then {
    source-nat {
    interface;
    }
    }
    }
    }
    }
    destination {
    pool DVR_3000 {
    routing-instance {
    default;
    }
    address 10.0.39.5/32 port 3000;
    }
    pool DVR_3001 {
    routing-instance {
    default;
    }
    address 10.0.39.5/32 port 3001;
    }
    rule-set DVR_3000 {
    from zone UNTRUST-ISP1;
    rule DVR_3000 {
    match {
    destination-address 0.0.0.0/0;
    destination-port {
    3000;
    }
    }
    then {
    destination-nat {
    pool {
    DVR_3000;
    }
    }
    }
    }
    rule DVR_3001 {
    match {
    destination-address 0.0.0.0/0;
    destination-port {
    3001;
    }
    }
    then {
    destination-nat {
    pool {
    DVR_3001;
    }
    }
    }
    }
    }
    }
    }



    Policies
    from-zone UNTRUST-ISP1 to-zone TRUST {
    policy UNSTRUST_TRUST {
    match {
    source-address any;
    destination-address DVR_3000;
    application any;
    }
    then {
    permit;
    }
    }
    }

    ------------------------------
    Leandro Gomes
    ------------------------------



  • 4.  RE: Configuration DVR - IP DYNAMIC - DYNDNS

    Posted 04-01-2021 09:47
    help me please.

    ------------------------------
    Leandro Gomes
    ------------------------------