[jira] [Commented] (CLOUDSTACK-10003) automatic configure juniper srx/vsrx nat loopback

["ASF GitHub Bot (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/CLOUDSTACK-10003?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16292461#comment-16292461 ] 

ASF GitHub Bot commented on CLOUDSTACK-10003:
---------------------------------------------

rhtyd commented on issue #2184: CLOUDSTACK-10003 automatic configure juniper srx/vsrx nat loopback,
URL: https://github.com/apache/cloudstack/pull/2184#issuecomment-351997478
 
 
   @blueorangutan package

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


> automatic configure juniper srx/vsrx nat loopback
> -------------------------------------------------
>
>                 Key: CLOUDSTACK-10003
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-10003
>             Project: CloudStack
>          Issue Type: Improvement
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Automation
>    Affects Versions: 4.8.0, 4.9.0, 4.10.0.0, 4.8.1.1, 4.9.0.1
>         Environment: network-pluge juniper srx
>            Reporter: ming
>             Fix For: 4.8.0, 4.9.0, 4.10.0.0, 4.8.1.1, 4.9.0.1
>
>
> automatic configure juniper srx/vsrx nat loopback,
> constraint condition that manual configure source nat in juniper srx，allowed vm vist public network :
> zone : trust to {trust,untrust}
> rule : source address {0.0.0.0/0},destination address{0.0.0.0/0} ,do source nat with pool {public network getway ip}.
> code change for trust to trust destination or static nat:
> add srxCommand :CHECK_PRIVATE_IF_EXISTS. for add/delete rule to detect whether exist or not contain DestinationNatRule or StaticNatRule (ruleName_private) in trust zone .
> add DestinationNatRule (ruleName_private) to trust zone when ADD DestinationNatRule to untrust .
> delete DestinationNatRule (ruleName_private) from trust zone when DELETE DestinationNatRule from untrust.
> add StaticNatRule (ruleName_private) to trust zone when ADD StaticNatRule to untrust .
> delete StaticNatRule (ruleName_private) from trust zone when DELETE StaticNatRule from untrust.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)