Uploaded image for project: 'CloudStack'
  1. CloudStack
  2. CLOUDSTACK-10003

automatic configure juniper srx/vsrx nat loopback

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: 4.8.0, 4.9.0, 4.10.0.0, 4.8.1.1, 4.9.0.1
    • Fix Version/s: 4.8.0, 4.9.0, 4.10.0.0, 4.8.1.1, 4.9.0.1
    • Component/s: Automation
    • Security Level: Public (Anyone can view this level - this is the default.)
    • Labels:
      None
    • Environment:
      network-pluge juniper srx

      Description

      automatic configure juniper srx/vsrx nat loopback,

      constraint condition that manual configure source nat in juniper srx,allowed vm vist public network :
      zone : trust to

      {trust,untrust}

      rule : source address

      {0.0.0.0/0},destination address{0.0.0.0/0}

      ,do source nat with pool

      {public network getway ip}

      .

      code change for trust to trust destination or static nat:

      add srxCommand :CHECK_PRIVATE_IF_EXISTS. for add/delete rule to detect whether exist or not contain DestinationNatRule or StaticNatRule (ruleName_private) in trust zone .
      add DestinationNatRule (ruleName_private) to trust zone when ADD DestinationNatRule to untrust .
      delete DestinationNatRule (ruleName_private) from trust zone when DELETE DestinationNatRule from untrust.
      add StaticNatRule (ruleName_private) to trust zone when ADD StaticNatRule to untrust .
      delete StaticNatRule (ruleName_private) from trust zone when DELETE StaticNatRule from untrust.

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                Unassigned
                Reporter:
                ming-416 ming
              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated: