关于juniper srx 系列 (15.1x)如何映射 udp端口
需求映射网络电话服务器udp 1111 2222 (举例)
选择destination NAT
配置如下 :
定义一个 destination pool
set security nat destination pool 10-6-1-1-1111 routing-instance default
set security nat destination pool 10-6-1-1-1111 address 10.6.1.1/32
set security nat destination pool 10-6-1-1-1111 address port 1111
区域 trust 到untust
set security nat destination rule-set 001 from zone trust
set security nat destination rule-set 001 from zone untrust
set security nat destination rule-set 001 rule 10-6-1-1-1111 then destination-nat pool 10-6-1-1-1111
set security nat destination rule-set 001 rule 10-6-1-1-1111 match destination-address 111.000.222.333/32 (外网出口地址)
set security nat destination rule-set 001 rule 10-6-1-1-1111 match destination-port 1111
set security nat destination rule-set 001 rule 10-6-1-1-1111 match protocol udp
juniper srx 系列 (15.1x)如何映射 udp端口
原文地址:http://blog.51cto.com/10963793/2157892
时间: 2024-12-29 09:54:45