Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?


no-nat-traversal (Services IPsec VPN)


Hierarchy Level


Configure to disable NAT-T at the services-set level (tunnel level). NAT-T is enabled by default therefore you must use the no-nat-traversal for disabling the NAT-T.


The global disable NAT-T setting at [edit services ipsec-vpn] hierarchy level overrides the default NAT-T setting at [edit service-set] hierarchy level.

Required Privilege Level

interface—To view this statement in the configuration.

interface-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 17.4R1.