Juniper NetScreen MIP转换

MIP-Definition

MIP (Mapped IP) is a 1 to 1 mapping of a public IP address to an IP address on the Internal side of the Juniper firewall

MIP一对一映射，从公网IP映射到私网IP

Configuring a MIP to access a single device on the private network

set int eth0/0 zone untrust

set int eth0/0 ip 1.1.1.250/24

set int eth0/0 route

set int eth0/1 zone trust

set int eth0/1 ip 192.168.1.1/24

set int eth0/1 route

set int eth0/0 mip 1.1.1.100 host 192.168.1.100 netmask 255.255.255.255 vroute trust-vr

set policy from untrust to trust any mip(1.1.1.100) any permit log

Configuring a MIP to a subnet or multiple internal hosts

set int eth0/0 zone untrust

set int eth0/0 ip 1.1.1.250/24

set int eth0/0 route

set int eth0/1 zone trust

set int eth0/1 ip 192.168.1.1/24

set int eth0/1 route

set int eth0/0 mip 1.1.1.0 host 192.168.1.0 netmask 255.255.255.224 vroute trust-vr

set policy from untrust to trust any mip(1.1.1.0/27) any permit log