1 to 1 mapped address for Juniper SSG320 / ScreenOS how to
Posted on 2013-05-13
I need to add an 1-to-1 mapped IP on a juniper ScreenOS ssg320m. I'm not familiar with the screenos at all and never used one so if someone out there could help me that would be awesome as I'm the accidental administrator right now..
e 0/0 - trust - LAN subnet 192.168.1.0/24
e 0/1 - dmz - 10.0.0.0/24
e 0/2 - public IP1 (connects to cable modem) say 18.104.22.168
e 0/3 - unused -
I called our ISP and it seems that we have another public ip I can use that we are not using so far.. say 22.214.171.124
(but only one connection from the cable modem to the firewall?? How that will work?)
I have an internal host that I would like to map the new public ip address. Note that the host will not be connecting directly to the firewall due to distance but to a switch that the firewall's trust interface is connected to.
So question 1... how can I map host 192.168.1.100 to the 2nd public ip that we have 126.96.36.199 ?
Question 2... if we were to run a cable from that host directly to port 3 of the firewall, can that host be on a different subnet, like 192.168.6.100 ?