[Contents] [Prev] [Next] [Index] [Report an Error]


Configure Network Address Translation Services

To configure Network Address Translation (NAT) services, you include statements at the [edit services] hierarchy level of the configuration:

[edit services]
nat {
    pool nat-pool-name {
        address (address | address-range low minimum-value high maximum-value);
        port (automatic | range low minimum-value high maximum-value);
    }
    rule rule-name {
        match-direction (input | output);
        term term-name {
            from {
                applications [ application-names ];
                application-sets [ set-names ];
                destination-address address;
                source-address address;
            }
            then {
                translated {
                    destination-pool nat-pool-name;
                    source-pool nat-pool-name;
                    translation-type (destination type | source type);
                }
                syslog;
            }
        }
    }
    rule-set rule-set-name {
        [ rule rule-names ];
    }
}

NOTE: JUNOS software uses stateful firewall settings as a basis for performing NAT. You must commit a stateful firewall configuration in the same service set for NAT to function properly.

This chapter includes the following sections:


[Contents] [Prev] [Next] [Index] [Report an Error]