访问192.168.1.1

set nat source rule 20 destination address '192.168.1.1/32'

set nat source rule 20 outbound-interface name 'eth1'

set nat source rule 20 source address '10.0.0.0/24'

set nat source rule 20 translation address '192.168.1.10'

set firewall zone ETH1 interface eth1

set firewall ipv4 name LAN-ETH1 default-action drop

set firewall ipv4 name LAN-ETH1 rule 10 action accept

set firewall ipv4 name LAN-ETH1 rule 10 destination address 192.168.1.1

set firewall ipv4 name LAN-ETH1 rule 10 source address 10.0.0.0/24

set firewall ipv4 name LAN-ETH1 rule 10 protocol tcp_udp

set firewall ipv4 name LAN-ETH1 rule 10 log

set firewall zone ETH1 from LAN firewall name LAN-ETH1

set firewall ipv4 name ETH1-LAN default-action drop

set firewall ipv4 name ETH1-LAN rule 10 action accept

set firewall ipv4 name ETH1-LAN rule 10 state established enable

set firewall ipv4 name ETH1-LAN rule 10 state established

set firewall ipv4 name ETH1-LAN rule 10 state related

set firewall zone LAN from ETH1 firewall name ETH1-LAN