Re: Do you know how to configure PAT?

Check the KB : http://kb.juniper.net/InfoCenter/index?page=content&id=KB12631&actp=search . Does diagram and traffic flow matches with your requirement? If yes, then follow the below:

Configure the address object for the public address:

set address trust server-pub 1.1.1.100/32    <-- this his is public IP address outside the                                                       subnet of untrust zone subnet.  


Configure a route for the public address to point in the direction of the private address:

set interface ethernet0/0 zone trust         
set route 1.1.1.100/32 int e0/0               <-- This will force traffic to trust zone, this                                                will further help to policy condition match                    


Configure the destination translation within a policy:

set policy from untrust to trust any server-pub any nat dst ip 192.168.1.100 permits


 

Let me know if your Public IP is same as untrust zone subnet IP then I will send you another sample of the case.

 

Thanks,

Vikas