Configuring NAT Actions (SRC CLI)
You can configure NAT actions for Junos OS ASP policy rules. The type of action that you can create depends on the type of policy rule. See Policy Information Model.
Use the following configuration statements to configure NAT actions:
policies group name list name rule name nat {
translation-type translation-type ;
description description ;
}
policies group name list name rule name nat port {
from-port from-port ;
}
policies group name list name rule name nat ip-network group-network {
network-specifier network-specifier ;
}
To configure a NAT action:
From configuration mode, enter the NAT action configuration.
user@host# edit policies group junos list nat rule pr nat(Optional) Configure the type of network address translation that is used.
[edit policies group junos list nat rule pr nat]user@host# set translation-type translation-type(Optional) Enter a description for the NAT action.
[edit policies group junos list nat rule pr nat]user@host# set description description(Optional) Configure the port range to restrict port translation when the NAT translation type is configured in dynamic-source mode.
[edit policies group junos list nat rule pr nat]user@host# set port from-port from-port(Optional) Configure the IP address ranges.
[edit policies group junos list nat rule pr nat]user@host# set ip-network group-network network-specifier network-specifier(Optional) Verify the NAT action configuration.
[edit policies group junos list nat rule pr nat] user@host# show translation-type "source dynamic"; ip-network { group-network { network-specifier 192.168.1.100/32; } } port { from-port 2010..2020; }