See the following sections:
- rule-set rule-set-name {
- from interface [interface-name]
|
- routing-instance [routing-instance-name]
| zone [zone-name];
-
- rule
rule-name {
-
- match {
- destination-address destination-address ;
- destination-port port-number ;
- source-address [source-address];
- }
-
- then {
- destination-nat (off | pool pool-name
);
- }
- }
- }
Statement introduced in Release 9.2 of JUNOS software.
Configure the set of rules for destination NAT.
This statement is supported on SRX-series devices.
rule-set-name —Name of the rule set.
The remaining statements are explained separately.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- rule-set rule-set-name {
- from interface [interface-name]
|
- routing-instance [routing-instance-name]
| zone [zone-name];
-
- rule
rule-name {
-
- match {
- destination-address [destination-address];
- source-address [source-address];
- }
-
- then {
- source-nat (off | interface
| pool pool-name );
- }
- }
- to interface [interface-name]
|
- routing-instance [routing-instance-name]
| zone [zone-name];
- }
Statement introduced in Release 9.2 of JUNOS software.
Configure the set of rules for source NAT.
This statement is supported on SRX-series devices.
rule-set-name —Name of the rule set.
The remaining statements are explained separately.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- rule-set rule-set-name {
- from interface [interface-name]
|
- routing-instance [routing-instance-name]
| zone [zone-name];
-
- rule
rule-name {
-
- match {
- destination-address [destination-address];
- }
-
- then {
- static-nat prefix < addr-prefix
>
- <routing-instance routing-instance-name >;
- }
- }
- }
Statement introduced in Release 9.3 of JUNOS software.
Configure the set of rules for static NAT.
This statement is supported on SRX-series devices.
rule-set-name —Name of the rule set.
The remaining statements are explained separately.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
