Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


Configure NAT


This menu is available only for SRX300 lines of devices and SRX550M device.

You are here: Configure > Device Settings > NAT.

Network Address Translation (NAT) is a method for modifying or translating network address information in packet headers. Either one or both of the source and destination addresses in a packet may be translated. NAT can also include the translation of port numbers.

The NAT type determines the order in which NAT rules are processed. During the first packet processing for a flow, NAT rules are applied in the following order:

  1. Static NAT rules

  2. Destination NAT rules

  3. Route lookup

  4. Security policy lookup

  5. Reverse mapping of static NAT rules

  6. Source NAT rules

Click Launch NAT Wizard. This wizard leads you through the basic required steps to configure NAT for the SRX Series security device. To configure more detailed settings, use either the J-Web interface or the command-line interface (CLI).

As you use this wizard, refer to the upper left area of the page to see where you are in the configuration process. Refer to the lower left area of the page for help related to the current page and its contents.

When you click a link under the Resources heading in the lower left area, the document opens in your browser. If it is in a new tab, be sure to close only the tab (not the browser window) when you close the document.

Related Documentation