Quantcast
Channel: All SRX Services Gateway posts
Viewing all articles
Browse latest Browse all 17645

Re: Ping with "source" attribute

$
0
0

I thought I would add a config snippet if people are trying to achieve the same goal you are but for SRX1xx/2xx chassis.

 

set interfaces lo0 unit 1 family inet address 1.1.1.1/24
set security nat source pool TEST address xx.xx.xx.xx/32  <-- Public IP you are using.
set security nat source rule-set TEST from zone junos-host
set security nat source rule-set TEST to zone zone-ext
set security nat source rule-set TEST rule TEST1 match source-address 1.1.1.1/32
set security nat source rule-set TEST rule TEST1 match destination-address 0.0.0.0/0
set security nat source rule-set TEST rule TEST1 then source-nat pool TEST
set security nat proxy-arp interface fe-0/0/1.0 address xx.xx.xx.xx/32  <-- Same as on line 2 above.  Also the interface is the same interface you are performing the NAT for.
Drop your loopback into the correct routing instance.
set routing-instances TEST interface lo0.1

Issues I encoutered were that I had an existing NAT source pool which I could not duplicate so had to remove the pool and associated nat rules.  Therefore this was only useful for me for a quick intrusive test.

 

Contruct your ping like the below (either add routing instance or not if you have one):

 

ping xx.xx.xx.xx source 1.1.1.1 routing-instance TEST

 

Thanks


Viewing all articles
Browse latest Browse all 17645

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>