Quantcast
Channel: SRX Services Gateway topics
Viewing all articles
Browse latest Browse all 3959

address/address-set under nat destination

$
0
0

Hi everybody.

I; struggling to understand what is wrong with my conf.

I'm configurig a nat destination rule:

set security nat destination rule-set PFW-RASPI rule PFW-8080 match source-address-name ASET-YOTI-OFFICE

but when I commit:

root@SRX210# commit
[edit security nat destination rule-set PFW-RASPI rule PFW-8080 match]
'source-address-name ASET-YOTI-OFFICE'
Can not find address/address-set(ASET-YOTI-OFFICE) in default global address book
error: configuration check-out failed

However I have that address book configured

root@SRX210# show | display set | match ASET-YOTI-OFFICE
set security address-book YOTI-OFFICE address-set ASET-YOTI-OFFICE address YOTI-1
set security address-book YOTI-OFFICE address-set ASET-YOTI-OFFICE address YOTI-2

 

Question 1: What is the reason of that error?

Question 2: Why JunOS gives the opportunity  to restrict the access to a range of IP under NAT as well as under the security policy for that nat rule? What is the difference?

Thanks


Viewing all articles
Browse latest Browse all 3959

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>