[Contents] [Prev] [Next] [Index] [Report an Error]

Configuring Specific Addresses That Are Not to Be Translated

The following configuration specifies that network address translation is not performed on incoming traffic from the source address 192.168.20.24/32. Dynamic NAT is performed on all other incoming traffic.

[edit services nat]
pool my-pool {
address-range low 10.10.10.1 high 10.10.10.16;
port-automatic;
}
rule src-nat {
match-direction input;
term t0 {
from {
source-address 192.168.20.24/32;
}
then {
no-translation;
}
}
term t1 {
then {
translated {
translation-type source dynamic;
source-pool my-pool;
}
}
}
}

[Contents] [Prev] [Next] [Index] [Report an Error]