Have you set up proxy-arp for the DNAT address? It does not work by itself, has to be manually if it is an address on the external (untrust) network.
/Per 28 nov 2013 kl. 10:32 skrev Mohammad Khalil <eng.m...@gmail.com>: > set security policies from-zone untrust to-zone trust policy > DNAT_ALTOS_POLICY match application TELNET_DNAT > > to > > set security policies from-zone untrust to-zone trust policy > DNAT_ALTOS_POLICY match application junos-telnet > > Did not work either _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
