Category: Network Security

moghaddas@srx# show configuration | compare rollback 3
[edit security address-book global]
+ address EXTERNAL1 1.1.1.1/32;
+ address EXTERNAL2 2.2.2.2/32;
+ address LOCAL-WEB 192.168.3.3/32;
 
[edit security address-book global]
+ address-set EXTERNALs {
+    address EXTERNAL1;
+    address EXTERNAL2;
+ }
[edit security nat destination]
+ pool LOCAL-WEB {
+    address 192.168.3.3/32 port 80;
+ }
 
[edit security nat destination rule-set EXTERNAL_TO_LOCAL-DNAT]
+ rule EXTERNALs_TO_LOCAL-WEB {
+    description "YOU CAN WRITE SOME INFO HERE AS DESCRIPTION";
+    match {
+       source-address-name EXTERNALs;
+       destination-address 3.3.3.3/32;
+       destination-port 80;
+    }
+    then {
+       destination-nat pool LOCAL-WEB;
+    }
+ }
 
[edit security policies from-zone EXTERNAL to-zone LOCAL]
+ /* YOU CAN ANNOTATE SOME INFO HERE */
+ policy EXTERNALs_TO_LOCAL-WEB {
+    match {
+       source-address EXTERNALs;
+       destination-address LOCAL-WEB;
+       application LOCAL-WEB-app;
+    }
+    then {
+       permit;
+    }
+ }
 
[edit applications]
+ application LOCAL-WEB-app {
+    protocol tcp;
+    destination-port 80;
+ }