source NAT with interface

Owned by Jean-luc KRIKER
Last updated: Nov 17, 2020
5 min read




CLI config

cli config
root@srx320> show configuration security nat
source {
    rule-set nsw_srcnat {
        from zone Internal;
        to zone Internet;
        rule nsw-src-interface {
            match {
                source-address 0.0.0.0/0;
            }
            then {
                source-nat {
                    interface;
                }
            }
        }
    }
}
DHCP server
set commands
root@srx320> show configuration interfaces | display set
set interfaces ge-0/0/0 unit 0 family inet dhcp-client update-server
set interfaces ge-0/0/1 unit 0 family ethernet-switching vlan members vlan0
set interfaces ge-0/0/2 unit 0 family ethernet-switching vlan members vlan0
set interfaces ge-0/0/3 unit 0 family ethernet-switching vlan members vlan0
set interfaces ge-0/0/4 unit 0 family ethernet-switching vlan members vlan0
set interfaces ge-0/0/5 unit 0 family ethernet-switching vlan members vlan0
set interfaces ge-0/0/6 unit 0 family ethernet-switching vlan members vlan0
set interfaces ge-0/0/7 unit 0 family inet dhcp-client
set interfaces irb unit 0 family inet address 192.168.1.1/24

root@srx320> show configuration vlans | display set
set vlans vlan0 vlan-id 2
set vlans vlan0 l3-interface irb.0

root@srx320> show configuration access address-assignment | display set
set access address-assignment pool jweb-default-pool family inet network 192.168.1.0/24
set access address-assignment pool jweb-default-pool family inet range jweb-default-range low 192.168.1.2
set access address-assignment pool jweb-default-pool family inet range jweb-default-range high 192.168.1.254
set access address-assignment pool jweb-default-pool family inet dhcp-attributes name-server 8.8.8.8
set access address-assignment pool jweb-default-pool family inet dhcp-attributes router 192.168.1.1
set access address-assignment pool jweb-default-pool family inet dhcp-attributes propagate-settings ge-0/0/0.0

root@srx320> show configuration system services dhcp-local-server | display set
set system services dhcp-local-server group jweb-default-group interface irb.0
DHCP Server
root@srx320> show configuration system services dhcp-local-server
group jweb-default-group {
    interface irb.0;
}


root@srx320> show configuration access address-assignment
pool jweb-default-pool {
    family inet {
        network 192.168.1.0/24;
        range jweb-default-range {
            low 192.168.1.2;
            high 192.168.1.254;
        }
        dhcp-attributes {
            name-server {
                8.8.8.8;
            }
            router {
                192.168.1.1;
            }
            propagate-settings ge-0/0/0.0;
        }
    }
}
vlan and interface 
root@srx320> show configuration vlans
vlan0 {
    vlan-id 2;
    l3-interface irb.0;
}

root@srx320> show configuration interfaces irb
unit 0 {
    family inet {
        address 192.168.1.1/24;
    }
}

root@srx320> show configuration interfaces
ge-0/0/0 {
    unit 0 {
        family inet {
            dhcp-client {
                update-server;
            }
        }
    }
}
ge-0/0/1 {
    unit 0 {
        family ethernet-switching {
            vlan {
                members vlan0;
            }
        }
    }
}
ge-0/0/2 {
    unit 0 {
        family ethernet-switching {
            vlan {
                members vlan0;
            }
        }
    }
}
ge-0/0/3 {
    unit 0 {
        family ethernet-switching {
            vlan {
                members vlan0;
            }
        }
    }
}
ge-0/0/4 {
    unit 0 {
        family ethernet-switching {
            vlan {
                members vlan0;
            }
        }
    }
}
ge-0/0/5 {
    unit 0 {
        family ethernet-switching {
            vlan {
                members vlan0;
            }
        }
    }
}
ge-0/0/6 {
    unit 0 {
        family ethernet-switching {
            vlan {
                members vlan0;
            }
        }
    }
}
ge-0/0/7 {
    unit 0 {
        family inet {
            dhcp-client;
        }
    }
}
irb {
    unit 0 {
        family inet {
            address 192.168.1.1/24;
        }
    }
}
J-WEB Config
Wizard
Add DNS ( was missing inthe Wizard )





show command