See the following sections:
- destination-address destination-address
;
- [edit security nat destination
rule-set rule-set-name rule rule-name match]
Statement introduced in Release 9.2 of JUNOS software.
Specify a destination address to match the rule. You can configure one address or a subnet.
This statement is supported on SRX-series devices.
destination-address —Destination address or a subnet.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- destination-address [ address-name
];
- [edit security idp idp-policy policy-name rulebase-exempt rule rule-name match],
- [edit security idp idp-policy policy-name rulebase-ips rule rule-name match]
Statement introduced in Release 9.2 of JUNOS software.
Specify a destination IP address or IP address set object to be used as the match destination address object. The default value is any.
This statement is supported on SRX-series devices.
address-name —IP address, IP address set object.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- destination-address {
-
address-name ;
- }
- [edit security policies
from-zone zone-name to-zone zone-name policy policy-name match]
Statement modified in Release 8.5 of JUNOS software.
Specify a destination IP address or IP address set to be used as the match criteria for the security policy.
This statement is supported on J-series and SRX-series devices.
address-name —IP address, IP address set, or address book entry.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- destination-address [destination-address];
- [edit security nat source
rule-set rule-set-name rule rule-name match]
Statement introduced in Release 9.2 of JUNOS software.
Specify a destination address to match the rule. You can configure multiple addresses or subnets.
This statement is supported on SRX-series devices.
destination-address —Destination address or a subnet.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- destination-address [destination-address];
- [edit security nat static
rule-set rule-set-name rule rule-name match]
Statement introduced in Release 9.3 of JUNOS software.
Specify a destination address to match the rule. You can configure one address or a subnet.
This statement is supported on SRX-series devices.
destination-address —Destination address or a subnet.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
- destination-address {
- drop-translated;
- drop-untranslated;
- }
- [edit security policies
from-zone zone-name to-zone zone-name policy policy-name then permit]
Statement introduced in Release 9.2 of JUNOS software.
Enable the destination address translation to permit the traffic. By default the policy permits both the translated and the untranslated packets.
This statement is supported on SRX-series devices.
drop-translated—Drop the packets with translated destination address.
drop-untranslated—Drop the packets without translated destination address.
For configuration instructions and examples, see the JUNOS Software Security Configuration Guide.
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.