You can use these two commands to see the sessions. show services stateful-firewall ? Possible completions: conversations Show conversations flows Show flow table entries
-----Original Message----- From: O S [mailto:[EMAIL PROTECTED] Sent: Thursday, April 12, 2007 6:35 PM To: Harshit Kumar; [EMAIL PROTECTED] Subject: Re: [j-nsp] "nat outside" Hi Harshit, Thanks a lot for the hint. So I added this + service { + input { + service-set NATout; + } + output { + service-set NATout; + } + } [edit interfaces] + sp-1/2/0 { + unit 0 { + family inet; + } + } [edit services] + service-set NATout { + nat-rules goOUT; + interface-service { + service-interface sp-1/2/0; + } + } The router seems doing some things after that, but I can I example the nat table? like show ip nat ... in cisco world. Many thanks, OS ----- Original Message ---- From: Harshit Kumar <[EMAIL PROTECTED]> To: O S <[EMAIL PROTECTED]>; [EMAIL PROTECTED] Sent: Thursday, April 12, 2007 3:08:26 AM Subject: RE: [j-nsp] "nat outside" You need to define a service-set (which can be applied on the physical interface) and use this rule in that service-set. See the following links: http://www.juniper.net/techpubs/software/junos/junos82/swconfig82-servic es/html/service-set-config4.html#1032529 http://www.juniper.net/techpubs/software/junos/junos82/swconfig82-servic es/html/service-set-config.html http://www.juniper.net/techpubs/software/junos/junos82/swconfig82-servic es/html/service-set-config2.html#1014436 thx Harshit -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of O S Sent: Wednesday, April 11, 2007 9:17 AM To: [EMAIL PROTECTED] Subject: [j-nsp] "nat outside" Hi, I'm looking for a nat configuration example in juniper M7i. I follow the book setup the service: nat { pool OUTIP { address 10.1.2.3/32; port automatic; } rule goOUT { match-direction output; term 1 { from { destination-address { 10.10.10.10/32; } } then { translated { source-pool OUTIP; translation-type source dynamic; } } } } } How do I apply the nat service to a interface (I failed to find the example from the book)? The router is Model: m7i JUNOS Base OS boot [8.0R2.8] JUNOS Base OS Software Suite [8.0R2.8] JUNOS Kernel Software Suite [8.0R2.8] JUNOS Packet Forwarding Engine Support (M7i/M10i) [8.0R2.8] JUNOS Routing Software Suite [8.0R2.8] JUNOS Online Documentation [8.0R2.8] Basically, I would like all packets from interface fe-0/0/0.0 go to server 10.10.10.10 be nat-ed. => [all other interfaces M7i fe-0/0/0.0] --> 10.10.10.10 where fe-0/0/0.0 has IP 10.1.2.1/24 Thanks a lot, OS ________________________________________________________________________ ____________ Don't pick lemons. See all the new 2007 cars at Yahoo! Autos. http://autos.yahoo.com/new_cars.html _______________________________________________ juniper-nsp mailing list [EMAIL PROTECTED] https://puck.nether.net/mailman/listinfo/juniper-nsp __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ juniper-nsp mailing list [EMAIL PROTECTED] https://puck.nether.net/mailman/listinfo/juniper-nsp
