Quantcast
Channel: SRX Services Gateway topics
Viewing all articles
Browse latest Browse all 3959

How to do destination NAT with domain?

$
0
0

Hello,

 

I'm wondering whether it's possible to do destination NAT with domain name. Something like:

 

- service1.example.com -> 172.17.1.3 port 80

- service2.example.com -> 172.17.1.4 port 80

 

There seems to be a discussion on this topic here, but that thread mentions source NAT. I've tried configuring an address in the address book like this:

 

set security zones security-zone Internet address-book address SERVICE_1 dns-name service1.example.com ipv4-only

Then configuring destination NAT like this:

 

 

description "Destination NAT for Service 1";
match {
    destination-address-name SERVICE_1;
    destination-port 80;
    protocol tcp;
}
then {
    destination-nat {
        pool {
           service-1-server;
        }
    }
}

 

However, when I tried committing, I got this error:

 

[edit security nat destination rule-set dst-nat rule forward-service-1 match]
  'destination-address-name'
    Can not find address/address-set(SERVICE_1) in default global address book
error: configuration check-out failed

 

 

(It seems that the global address book can't be set when there's any zone-specific address book configured - which in my case there is a few of addresses set there. Is there any other way?)

 

Any help would be appreciated.

 


Viewing all articles
Browse latest Browse all 3959

Trending Articles