Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?




Hierarchy Level


Specify the global default twin port range for all source pools. Two ports within range (63488, 65535) are allocated at a time for RTP/RTCP applications such as SIP, H.323, and RTSP for source pools with PAT.

The default twin port range is 2048. If you have an SRX5400, SRX5600, or SRX5800 device that supports a maximum of 1 million IP addresses, use this option to limit the twin port range and avoid exceeding the port capacity of 384 million.

To set the twin port range for a specific pool, use the port range twin-port port-low (to port-high) statement at the [edit security nat source pool] hierarchy level.


  • lower-twin-port-range—Specify the lower limit of the port range.

  • upper-twin-port-range—Specify the upper limit of the port range.

  • Range: 63,488 through 65,535.

Required Privilege Level

security—To view this statement in the configuration.

security-control—To add this statement to the configuration.

Release Information

Statement introduced in Junos OS Release 12.1X47-D10.