Quantcast
Channel: All ScreenOS Firewalls (NOT SRX) posts
Viewing all articles
Browse latest Browse all 2577

Re: Do you know how to configure PAT?

$
0
0

Hi SK,

 

I am unable to find a KB referring the same via GUI. However, you can make same configuration using below steps:

 

1:set address trust server-pub 1.1.1.100/32

 

    GUI--> Policy --> policy elements -->click on new --> configure the name(e.g. server-pub as per the CLI) and IP(e.g. 1.1.1.100/32), select the zone from the drop down  (e.g. trust) and click OK.

 

2: set interface ethernet0/0 zone trust

   

GUI--> Network --> interfaces --> select the appreciate interface, click edit. It will open a new window, select the zone from the drop down here.  Click on Apply and OK.

 

3: set route 1.1.1.100/32 int e0/0

    

   GUI --> Networks --> Routing --> destination --> Select VR from drop down in the right corner. Most probably trust-vr. Now click on "new" to add a new route. It will open a new window.

   Configure the IP/netmast --> Click on "gateway" instead of "virtual router" -->  Select the interface from the drop down.--> OK

 

4: set policy from untrust to trust any server-pub any nat dst ip 192.168.1.100 permit

 

   GUI--> Policy --Policies --> Select from and to zones from the drop downs (e.g. untrust & trust here) --> now click on new --> select source "any-IPV4" from address book --> select destination "server-pub" from drop down --> Service "ANY"   -->  select Action "permit"  and click on "advance" in the bottom.

     Check "Destination Translation "  and configure actual service IP in "translate IP" (e.g. 192..168.1.100 here) --> Click  OK.

 

Thanks,

Vikas

 

 

 


Viewing all articles
Browse latest Browse all 2577

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>