juniperSRX地址映射

需求说明：公网122.93.43.X:16927 映射 内网 10.100.124.200:80

我们注重客户提出的每个要求，我们充分考虑每一个细节，我们积极的做好成都网站建设、网站建设服务，我们努力开拓更好的视野，通过不懈的努力，创新互联赢得了业内的良好声誉，这一切，也不断的激励着我们更好的服务客户。 主要业务：网站建设,网站制作,网站设计,成都微信小程序,网站开发,技术开发实力，DIV+CSS，PHP及ASP，ASP.Net，SQL数据库的技术开发工程师。

定义内网地址
set security nat destination pool srv200-80 address 10.100.124.200/32
定义内网端口号
set security nat destination pool srv200-80 address port 80
定义公网地址+端口
edit security nat destination
set rule-set untrust-trust-set rule un122-srv200-443 match source-address 0.0.0.0/0
set rule-set untrust-trust-set rule un122-srv200-443 match destination-address 122.93.43.X/32
set rule-set untrust-trust-set rule un122-srv200-443 match destination-port 16927 ##公网端口
set rule-set untrust-trust-set rule un122-srv200-443 match protocol tcp
set rule-set untrust-trust-set rule un122-srv200-443 then destination-nat pool srv200-80

定义内网协议+端口

set applications application tcp-80 protocol tcp
set applications application tcp-80 destination-port 80

定义内网地址

set security zones security-zone trust address-book address srv200 10.100.124.200

定义策略
edit security policies from-zone untrust to-zone trust
set policy utot-srv11-3389 match source-address any
set policy utot-srv11-3389 match destination-address srv200
set policy utot-srv11-3389 match application tcp-80 ###### 定义内网真实端口####
set policy utot-srv11-3389 match application junios-http
set policy utot-srv11-3389 then permit

标题名称：juniperSRX地址映射
文章出自：http://6mz.cn/article/jjggco.html