The following configuration specifies that network address translation is not performed on incoming traffic from the source address 192.168.20.24/32. Dynamic NAT is performed on all other incoming traffic.
- [edit services nat]
- pool my-pool {
- address-range low 10.10.10.1 high 10.10.10.16;
- port-automatic;
- }
- rule src-nat {
- match-direction input;
-
- term t0 {
-
- from {
- source-address 192.168.20.24/32;
- }
-
- then {
- no-translation;
- }
- }
-
- term t1 {
-
- then {
-
- translated {
- translation-type source dynamic;
- source-pool my-pool;
- }
- }
- }
- }