Juniper NetScreen VIP

To open a port for external access, e.g. 192.168.71.61 is running a web service at port 80, and we want external access at 69.159.201.113 which is the public address.

Login NetScreen Administration WebUI,

1. update NetScreen WebUI port from 80 to 10000

a. Configuration > Admin > Management, update HTTP Port to be 10000.
b. click Apply

2. create VIP service

a. Network > Interfaces (List), click Edit (ethernet4)
b. click VIP, Network > Interface > Edit > VIP/VIP Services
c. click New VIP Service
d. select HTTP at the Map to Service, enter 192.168.71.61 at Map to IP
e. click OK

3. create a policy

a. click Policies
b. select from Untrust to Global, and click New
c. at the Destination Address, select VIP::1
d. at the Service, select HTTP
e. check Position at Top
f. click OK

4. verify the setting

a. in a browser, visit http://69.159.201.113