nat {
source {
rule-set trust-to-untrust {
from zone trust;
to zone untrust;
rule source-nat-rule {
match {
source-address 0.0.0.0/0;
destination-address 0.0.0.0/0;
}
then {
source-nat {
interface;
}
}
}
}
}
}
policies {
from-zone trust to-zone untrust {
policy trust-to-untrust {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone trust to-zone trust {
policy trust-to-trust {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
}
from-zone untrust to-zone trust {
policy untrust-to-trust-test {
match {
source-address any;
destination-address any;
application any;
}
then {
permit;
}
}
Session ID: 221723, Policy name: self-traffic-policy/1, Timeout: 1800, Valid
In: 192.168.16.3/57172 --> 192.168.16.4/22;tcp, If: ge-0/0/0.0, Pkts: 527, Bytes: 35377
Out: 192.168.16.4/22 --> 192.168.16.3/57172;tcp, If: .local..0, Pkts: 420, Bytes: 40445
Total sessions: 1
вот конфиг dhcp
650 за 240-м, где все порты в switch-mode, который к сожалению я не могу поставить в 650-м
Пинги с машины на маршрутизатор идут, дальше нет.