Hi shaan129,
Based on your explanation, and understanding you are using a SSG firewall, what you need to conifgure if MIP (static NAT):
https://kb.juniper.net/InfoCenter/index?page=content&id=KB10923&actp=METADATA
You could follow that article, just need to see it in the following way:
- The Internal host mentioned on that article (192.168.1.100) will be 192.168.1.254 in your scenario.
- The public interface and address mentioned in that article (eth0/0 and 1.1.1.250) will be interface eth0/5 and address 192.168.2.2 in your scenario.
- Zone Untrust in above article will be your Connector zone.
- Dont forget you will need a secuirty-policy between zones Trust and Connector and vice versa to allow these communications as shown on that article as well.
Please let me know if you have further questions.