address-mapping

Syntax

address-mapping;

Hierarchy Level

[edit security nat source rule-set ruleset rule rule then source-nat (pool | interface) persistent-nat]

Release Information

Statement introduced in Release 10.2 of Junos OS.

Description

Allows requests from a specific internal IP address to be mapped to the same reflexive IP address (the public IP address created by the NAT device closest to the STUN server); internal and external ports can be any ports. An external host using any port can send a packet to the internal host by sending the packet to the reflexive IP address (with a configured incoming policy that allows external to internal traffic). If this option is not configured, the persistent NAT binding is for specific internal and reflexive transport addresses.

You can only specify this option when the persistent NAT type is any-remote-host and the source NAT rule action is one of the following:

Source NAT pool with IP address shifting
Source NAT pool with no port translation and no overflow pool

Usage Guidelines

For configuration instructions and examples, see the Junos OS Security Configuration Guide.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration