rule (Source NAT Next Gen Services)
Syntax
rule rule-name {
match {
application [application-name]
destination-address (NAT Next Gen Services) address;
destination-address-name address-name;
source-address (address | any-unicast);
source-address-name address-name;
}
then {
source-nat {
clat-prefix clat-prefix;
filtering-type {
endpoint-independent {
prefix-list [allowed-host] except [denied-host];
}
}
mapping-type {
endpoint-independent;
}
pool nat-pool-name;
secure-nat-mapping {
eif-flow-limit number-of-flows;
mapping-refresh (inbound | inbound-outbound | outbound);
}
}
syslog;
}
}
Hierarchy Level
[edit services nat source rule-set rule-set]
Description
Configure a source NAT rule, which translates the source address of IP packets.
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
interface—To view this statement in the configuration.
interface-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 19.3R2.