Juniper SRX address mapping

Requirement description: public network 122.93.43.X:16927 mapping private network 10.100.124.200V80

Define private network address

Set security nat destination pool srv200-80 address 10.100.124.200

Define private network port number

Set security nat destination pool srv200-80 address port 80

Define public network address + port

Edit security nat destination

Set rule-set untrust-trust-set rule un122-srv200-443 match source-address 0.0.0.0 Universe 0

Set rule-set untrust-trust-set rule un122-srv200-443match destination-address 122.93.43.X/32

Set rule-set untrust-trust-set rule un122-srv200-443 match destination-port 16927 # # Public network port

Set rule-set untrust-trust-set rule un122-srv200-443match protocol tcp

Set rule-set untrust-trust-set rule un122-srv200-443then destination-nat pool srv200-80

Define intranet protocol + port

Set applications application tcp-80 protocol tcp

Set applications application tcp-80 destination-port 80

Define private network address

Set security zones security-zone trust address-book address srv200 10.100.124.200

Define a policy

Edit security policies from-zone untrust to-zone trust

Set policy utot-srv11-3389 match source-address any

Set policy utot-srv11-3389 match destination-address srv200

Set policy utot-srv11-3389 match application tcp-80 # defines the real port of private network #

Set policy utot-srv11-3389 match application junios-http

Set policy utot-srv11-3389 then permit