Configuring NAT Actions

You can configure NAT actions for JUNOS ASP policy rules. The type of action that you can create depends on the type of policy rule. See Policy Information Model.

Use the following configuration statements to configure NAT actions:

policies group name list name rule name nat name {
translation-type translation-type ;
description description ;
}
policies group name list name rule name nat name port {
from-port from-port ;
}
policies group name list name rule name nat name ip-network group-network {
network-specifier network-specifier ;
}

To configure a NAT action:

  1. From configuration mode, enter the NAT action configuration. For example, in this procedure, natAction is the name of the NAT action.
      user@host# edit policies group junos list nat rule pr nat natAction
  2. (Optional) Configure the type of network address translation that is used.
      [edit policies group junos list nat rule pr nat natAction]
      user@host# set translation-type translation-type
  3. (Optional) Enter a description for the NAT action.
      [edit policies group junos list nat rule pr nat natAction]
      user@host# set description description
  4. (Optional) Configure the port range to restrict port translation when the NAT translation type is configured in dynamic-source mode.
      [edit policies group junos list nat rule pr nat natAction]
      user@host# set port from-port from-port
  5. (Optional) Configure the IP address ranges.
      [edit policies group junos list nat rule pr nat natAction]
      user@host# set ip-network group-network network-specifier network-specifier
  6. (Optional) Verify the NAT action configuration. 
    [edit policies group junos list nat rule pr nat natAction]
user@host# show 
translation-type "source dynamic";
ip-network {
  group-network {
    network-specifier 192.168.1.100/32;
  }
}
port {
  from-port 2010..2020;
}