标签：private address access public policy
MIP-Definition
MIP (Mapped IP) is a 1 to 1 mapping of a public IP address to an IP address on the Internal side of the Juniper firewall
MIP一对一映射，从公网IP映射到私网IP
Configuring a MIP to access a single device on the private network
set int eth0/0 zone untrust
set int eth0/0 ip 1.1.1.250/24
set int eth0/0 route
set int eth0/1 zone trust
set int eth0/1 ip 192.168.1.1/24
set int eth0/1 route
set int eth0/0 mip 1.1.1.100 host 192.168.1.100 netmask 255.255.255.255 vroute trust-vr
set policy from untrust to trust any mip(1.1.1.100) any permit log
Configuring a MIP to a subnet or multiple internal hosts
set int eth0/0 zone untrust
set int eth0/0 ip 1.1.1.250/24
set int eth0/0 route
set int eth0/1 zone trust
set int eth0/1 ip 192.168.1.1/24
set int eth0/1 route
set int eth0/0 mip 1.1.1.0 host 192.168.1.0 netmask 255.255.255.224 vroute trust-vr
set policy from untrust to trust any mip(1.1.1.0/27) any permit log
本文出自 “CHJ农民工” 博客，请务必保留此出处http://3155099.blog.51cto.com/3145099/1610987
标签：private address access public policy
原文地址：http://3155099.blog.51cto.com/3145099/1610987
