destination (Destination NAT)

Syntax

destination {pool pool-name {address < ip-address > (to ip-address | port port-number );routing-instance routing-instance-name ;}rule-set rule-set-name {from interface [interface-name] | routing-instance [routing-instance-name] | zone [zone-name];rule rule-name {match {destination-address destination-address ;destination-port port-number ;source-address [source-address];}then {destination-nat (off | pool pool-name );}}}}

Hierarchy Level

[edit security nat]

Release Information

Statement modified in Release 9.6 of Junos OS.

Description

Configure destination NAT, which allows you to configure the following:

Translate destination IP address or addresses to a specific IP address.
Translate destination IP address or addresses and port number(s) to a specific IP address and one port number.
Translate a range of destination IP addresses to another range of IP addresses. This mapping is one-to-one, static, and without PAT.

Options

The remaining statements are explained separately.

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.