SRX

 View Only
last person joined: 4 days ago 

Ask questions and share experiences about the SRX Series, vSRX, and cSRX.
  • 1.  SRX Static NAT not working

    Posted 04-20-2018 05:53

    Hi,

     

    Following static NAT is not working, any suggestions?

    root@213-ROUTER> show configuration | display set | match S1
    set security nat static rule-set S1 from interface ge-0/0/5.0
    set security nat static rule-set S1 rule r1 match destination-address 10.213.21.177/32
    set security nat static rule-set S1 rule r1 then static-nat prefix 40.1.1.11/32
    set security nat static rule-set S1 rule r1 then static-nat prefix routing-instance JCShubspoke

     

    10.213.21.177 is the IP Address configured on interface ge-0/0/5 in routing-instance JCShubspoke.

    40.1.1.11 is the IP Address of the internal server, connected via inteface ge-0/0/6 in  routing-instance JCShubspoke.

    The IP Address of  ge-0/0/6 is 40.1.1.254.

     

    My SRX is in packet mode , so no zones required. Proxy-arp is also not required, since I am directly using the same IP Address which is there on ge-0/0/5.

     

    root@213-ROUTER> show security nat static rule all
    Total static-nat rules: 1
    Total referenced IPv4/IPv6 ip-prefixes: 2/0
    Static NAT rule: r1 Rule-set: S1
    Rule-Id : 1
    Rule position : 1
    From interface : ge-0/0/5.0
    Destination addresses : 10.213.21.177
    Host addresses : 40.1.1.11
    Netmask : 32
    Host routing-instance : JCShubspoke
    Translation hits : 0
    Successful sessions : 0
    Failed sessions : 0
    Number of sessions : 0



  • 2.  RE: SRX Static NAT not working
    Best Answer

    Posted 04-20-2018 08:11

    AT only works in FLOW mode not in PACKET mode

    regards

    alexander



  • 3.  RE: SRX Static NAT not working

    Posted 04-20-2018 22:56

    Thanks Alex for conforming.