Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

show security nat static rule

Syntax

Description

Display information about the specified static Network Address Translation (NAT) rule. Traffic directions allows you to specify from interface, from zone, or from routing-instance and packet information can be source addresses and ports, and destination addresses and ports.

Options

rule-name

Name of the rule.

all

Display information about all the static NAT rules.

logical-system

Display information about the static NAT rules for a specified logical system. Specify all to display information for all logical systems.

root-logical-system

Display information about the static NAT rules for the primary (root) logical system.

tenant

Display information about the static NAT rules for a specified tenant system. Specify all to display information for all tenant systems.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security nat static rule command. Output fields are listed in the approximate order in which they appear.

Table 1: show security nat static rule Output Fields

Field Name

Field Description

Static NAT rule

Name of the static NAT rule.

Total referenced IPv4/IPv6 ip-prefixes

Number of IP prefixes referenced in source, destination, and static NAT rules. This total includes the IP prefixes configured directly, as address names, and as address set names in the rule.

Rule-set

Name of the rule set. Currently, you can configure 8 rules within the same rule set.

Description

Description of the static NAT rule.

Rule-Id

Rule identification number.

Rule position

Position of the rule that indicates the order in which it applies to traffic.

From interface

Name of the interface from which the packets flow.

From routing instance

Name of the routing instance from which the packets flow.

From zone

Name of the zone from which the packets flow.

Destination addresses

Name of the destination addresses that match the rule.

Destination NPTv6 addr

Destination address that matches the rule.

Source addresses

Name of the source addresses that match the rule.

Host addresses

Name of the host addresses that match the rule.

Netmask

Subnet IP address.

Destination NPTv6 Netmask

Subnet IPv6 address.

Host routing-instance

Name of the host routing instance.

Destination port

Destination port numbers that match the rule. The default value is any.

Source port

Source port numbers that match the rule.

Total static-nat rules

Number of static NAT rules.

Translation hits

Number of times a translation in the translation table is used for a static NAT rule.

Successful sessions

Number of successful session installations after the NAT rule is matched.

Failed sessions

Number of unsuccessful session installations after the NAT rule is matched.

Number of sessions

Number of sessions that reference the specified rule.

Sample Output

show security nat static rule

Sample Output

show security nat static rule all tenant

Sample Output

show security nat static rule (IPv6)

Sample Output

show security nat static rule all

Release Information

Command introduced in Junos OS Release 9.3.

The Description output field added in Junos OS Release 12.1.

Support for IPv6 logical systems and the Successful sessions, Failed sessions, Number of sessions, Source addresses and Source ports output fields added in Junos OS Release 12.1X45-D10.

The Destination NPTv6 addr and Destination NPTv6 Netmask output fields added in Junos OS Release 12.3X48-D25.

The tenant option is introduced in Junos OS Release 18.3R1.