[CLOUDSTACK-10003] automatic configure juniper srx/vsrx nat loopback

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 4.8.0, 4.9.0, 4.10.0.0, 4.8.1.1, 4.9.0.1
• Fix Version/s: 4.8.0, 4.9.0, 4.10.0.0, 4.8.1.1, 4.9.0.1
• Component/s: Automation
• Security Level: Public (Anyone can view this level - this is the default.)
• Environment: network-pluge juniper srx
• Assignee: Unassigned
• Reporter: ming
• Created: 15/Jul/17 10:23
• Updated: 16/Dec/17 04:21

Description

automatic configure juniper srx/vsrx nat loopback,

constraint condition that manual configure source nat in juniper srx，allowed vm vist public network :
zone : trust to

{trust,untrust}

rule : source address

{0.0.0.0/0},destination address{0.0.0.0/0}

,do source nat with pool

{public network getway ip}

.

code change for trust to trust destination or static nat:

add srxCommand :CHECK_PRIVATE_IF_EXISTS. for add/delete rule to detect whether exist or not contain DestinationNatRule or StaticNatRule (ruleName_private) in trust zone .
add DestinationNatRule (ruleName_private) to trust zone when ADD DestinationNatRule to untrust .
delete DestinationNatRule (ruleName_private) from trust zone when DELETE DestinationNatRule from untrust.
add StaticNatRule (ruleName_private) to trust zone when ADD StaticNatRule to untrust .
delete StaticNatRule (ruleName_private) from trust zone when DELETE StaticNatRule from untrust.

Issue Links

• links to: GitHub Pull Request #2184