JuniperNetScreenMIP转换

MIP-Definition

成都创新互联是专业的三元网站建设公司，三元接单;提供做网站、成都做网站,网页设计,网站设计,建网站,PHP网站建设等专业做网站服务;采用PHP框架,可快速的进行三元网站开发网页制作和功能扩展;专业做搜索引擎喜爱的网站,专业的做网站团队,希望更多企业前来合作!

MIP (Mapped IP) is a 1 to 1 mapping of a public IP address to an IP address on the Internal side of the Juniper firewall

MIP一对一映射，从公网IP映射到私网IP

Configuring a MIP to access a single device on the private network

set int eth0/0 zone untrust

set int eth0/0 ip 1.1.1.250/24

set int eth0/0 route

set int eth0/1 zone trust

set int eth0/1 ip 192.168.1.1/24

set int eth0/1 route

set int eth0/0 mip 1.1.1.100 host 192.168.1.100 netmask 255.255.255.255 vroute trust-vr

set policy from untrust to trust any mip(1.1.1.100) any permit log

Configuring a MIP to a subnet or multiple internal hosts

set int eth0/0 zone untrust

set int eth0/0 ip 1.1.1.250/24

set int eth0/0 route

set int eth0/1 zone trust

set int eth0/1 ip 192.168.1.1/24

set int eth0/1 route

set int eth0/0 mip 1.1.1.0 host 192.168.1.0 netmask 255.255.255.224 vroute trust-vr

set policy from untrust to trust any mip(1.1.1.0/27) any permit log