Understanding Destination NAT

Destination NAT is the translation of the destination IP address of a packet entering the Juniper Networks device. Destination NAT is used to redirect traffic destined to a virtual host (identified by the original destination IP address) to the real host (identified by the translated destination IP address).

Note: When destination NAT is performed, the destination IP address is translated according to configured destination NAT rules and then security policies are applied.

The following types of destination NAT are supported:

• Translation of the original destination IP address to an IP address from a user-defined pool. This type of translation does not include Port Address Translation (PAT). If the original destination IP address range is larger than the address range in the user-defined address pool, any untranslated packets are dropped.
• Translation of the original destination IP address (and optional port number) to one specific IP address (and port number) from a user-defined pool.

Related Topics

• Destination NAT Configuration Overview