Juniper SSG VIP port range (ScreenOS 6.3.x)

Instead of mapping individual ports between virtual IP and real server IP, you can map a
range of ports between them by using the port-range VIP entry feature. You can enable
this feature by using the set interface command:
 

set interface <interface> vip { ip_address | interface_ip } port-range port1  port2 server-ip ip-address2 port-range portx - porty [ protocol TCP | UDP ] [manual]
 

The port-range VIP entry is considered a single entry. The range of ports is from 1  65535.
For example, to map ports from 3 to 20, to ports 43 to 60, using IP address 10.10.10.100
and server IP 10.42.62.100

Leave a comment