Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

 
 

show security nat source rule

Syntax

Description

Display information about the specified source Network Address Translation (NAT) rule.

Options

rule-name

Name of the rule.

all

Display information about all the source NAT rules.

logical-system

Display information about the source NAT rules for a specified logical system. Specify all to display information for all logical systems.

root-logical-system

Display information about the source NAT rules for the primary (root) logical system.

tenant

Display information about the source NAT rules for a specified tenant system. Specify all to display information for all tenant systems.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security nat source rule command. Output fields are listed in the approximate order in which they appear

Table 1: show security nat source rule Output Fields

Field Name

Field Description

Source NAT rule

Name of the source NAT rule.

Total rules

Number of source NAT rules.

Total referenced IPv4/IPv6 ip-prefixes

Number of IP prefixes referenced in source, destination, and static NAT rules. This total includes the IP prefixes configured directly, as address names, and as address set names in the rule.

Description

Description of the source NAT rule.

Rule-Id

Rule identification number.

Rule position

Position of the source NAT rule.

From zone

Name of the zone from which the packets flow.

To zone

Name of the zone to which the packets flow.

From routing instance

Name of the routing instance from which the packets flow.

To routing instance

Name of the routing instance to which the packets flow.

From interface

Name of the interface from which the packets flow.

To interface

Name of the interface to which the packets flow.

Source addresses

Name of the source addresses that match the rule.

Source port

Source port numbers that match the rule.

Destination address

Name of the destination addresses that match the rule.

Destination ports

Destination port numbers that match the rule.

Application

Indicates whether the application option is configured.

Action

The action taken in regard to a packet that matches the rule’s tuples. Actions include the following:

  • off—Do not perform source NAT.

  • source NAT pool—Use user-defined source NAT pool to perform source NAT

  • interface—Use egress interface's IP address to perform source NAT.

Persistent NAT type

Persistent NAT type.

Persistent NAT mapping type

Persistent NAT mapping type.

Inactivity timeout

Inactivity timeout for persistent NAT binding.

Max session number

Maximum number of sessions.

Translation hits

Number of translation hits.

Successful sessions

Number of successful session installations after the NAT rule is matched.

Failed sessions

Number of unsuccessful session installations after the NAT rule is matched.

Number of sessions

Number of sessions that reference the specified rule.

Sample Output

show security nat source rule rule_namelength_is_now_changed_upto_63_characters_length

Sample Output

show security nat source rule all (SRX Series devices)

show services nat source rule all (MX-SPC3)

Sample Output

show security nat source rule all tenant

Release Information

Command introduced in Junos OS Release 9.2. Support.

The Description output field added in Junos OS Release 12.1.

Support for IPv6 logical systems and the Source port, Successful sessions, Failed sessions, and Number of sessions output fields added in Junos OS Release 12.1X45-D10.

Output for multiple destination ports and the application output field added in Junos OS Release 12.1X47-D10.

The tenant option is introduced in Junos OS Release 18.3R1.