Juniper ScreenOS NAT Overview: MIP DIP VIP

MIP DIP VIP. I am sometimes confused with the NAT names of the Juniper ScreenOS devices. Therefore, I drew a small figure with a few basic examples for these NAT types.

Note that this figure does not cover all possible scenarios, but only the most common ones. E.g., I have never used the destination NAT inside a security policy, thereby it is now shown here.

Juniper ScreenOS MIP DIP VIP

Or download it as PDF:

download-buttons02

Links

3 thoughts on “Juniper ScreenOS NAT Overview: MIP DIP VIP

  1. Great article. I’m sometimes confused myself. I use mip and vip. Never used dip before. In what situation would dip be used?

    1. DIP is used when you have multiple untrust IP address and want to use them all for outgoing connections. E.g., when your single interface IP address does not fit due to too many connections.
      Thanks for the hint. I updated the figure slightly.

Leave a Reply

Your email address will not be published. Required fields are marked *