match (Security Source NAT)
Syntax
match {
application {
[application];
any;
}
(destination-address <ip-address> | destination-address-name <address-name>);
destination-port (port-or-low <to high>);
protocol [protocol-name | protocol-number];
source-address [ip-address];
source-address-name [address-name];
source-port (port-or-low <to high>);
}
Hierarchy Level
[edit security nat source rule-set rule-set-name rule rule-name]
Description
Specify the source rules to be used as match criteria.
If the options source-port, destination-port, and protocol are configured as match conditions, then
you cannot also configure the application option as a match
condition. The reverse is also true: if you configure the application option as a match condition for a rule, you cannot also configure
the source-port, destination-port, and protocol options.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement modified in Junos OS Release 9.6. Statement modified in Junos OS Release 12.1X45-D10. Statement modified in Junos OS Release 12.1X47-D10.