close

keyboard_arrow_left

Table of Contents Expand all

list Table of Contents

English

show security nat destination rule

date_range 19-Nov-23

arrow_backward

arrow_forward

Syntax

content_copy zoom_out_map
show security nat destination rule 
rule-name 
all
logical-system (logical-system-name)
root-logical-system
tenant (tenant-name)

Description

Display information about the specified destination Network Address Translation (NAT) rule. Destination NAT rules are processed after static NAT rules but before source NAT rules.

Options

`rule-name`	Display information about the specified destination NAT rule.
all	Display information about all the destination NAT rules.
logical-system	Display information about the destination NAT rules for a specified logical system. Specify `all` to display information for all logical systems.
root-logical-system	Display information about the destination NAT rules for the primary (root) logical system.
tenant	Display information about the destination NAT rules for a specified tenant system. Specify `all` to display information for all tenant systems.

Required Privilege Level

view

Output Fields

Table 1 lists the output fields for the show security nat destination rule command. Output fields are listed in the approximate order in which they appear.

Table 1: show security nat destination rule Output Fields
Field Name	Field Description
Total destination-nat rules	Number of destination NAT rules.
Total referenced IPv4/IPv6 ip-prefixes	Number of IP prefixes referenced in source, destination, and static NAT rules. This total includes the IP prefixes configured directly as address names and as address set names in the rule.
Destination NAT rule	Name of the destination NAT rule.
Description	Description of the destination NAT rule.
Rule-Id	Rule identification number.
Rule position	Position of the destination NAT rule.
From routing instance	Name of the routing instance from which the packets flow.
From interface	Name of the interface from which the packets flow.
From zone	Name of the zone from which the packets flow.
Source addresses	Name of the source addresses that match the rule. The default value is any.
Destination addresses	Name of the destination addresses that match the rule. The default value is any.
Action	The action taken when a packet matches the rule’s tuples. Actions include the following: destination NAT pool—Use user-defined destination NAT pool to perform destination NAT. off—Do not perform destination NAT.
Destination ports	Destination ports number that match the rule. The default value is any.
Application	Indicates whether the application option is configured.
Translation hits	Number of translation hits.
Successful sessions	Number of successful session installations after the NAT rule is matched.
Failed sessions	Number of unsuccessful session installations after the NAT rule is matched.
Number of sessions	Number of sessions that reference the specified rule.

Sample Output

show security nat destination rule namelength-is-now-changed-upto-63-characterslength

content_copy zoom_out_map
user@host>show security nat destination rule namelength-is-now-changed-upto-63-characterslength
 
 Destination NAT rule: namelength-is-now-changed-upto-63-characterslength            Rule-set: namelength-is-now-changed-upto-63-characterslength 
  Description                : The destination rule dst2-rule is for the sales team
  Rule-Id                    : 1  
  Rule position              : 1
  From routing instance      : ri1
                             : ri2
  Match
    Source addresses         : add1
                               add2
    Destination addresses    : add9
  Action                     : off 
                                        
  Destination port           : 0 
 Translation hits           : 68
   Successful sessions      : 25
   Failed sessions          : 43  
 Number of sessions         : 2

Sample Output

show security nat destination rule all
show security nat destination rule all tenant

show security nat destination rule all

content_copy zoom_out_map
user@host> show security nat destination rule all

Total destination-nat rules: 1
Total referenced IPv4/IPv6 ip-prefixes: 2/0
 
Destination NAT rule: r4                   Rule-set: rs4 
  Rule-Id                    : 2  
  Rule position              : 2
  From zone                  : untrust
  Match
    Source addresses         : 192.0.2.0 - 192.0.2.255
    Destination addresses    : 198.51.100.0 - 198.51.100.255
    Application              : configured
  Action                     : off 
  Translation hits           : 0
    Successful sessions      : 0
    Failed sessions          : 0
  Number of sessions         : 0
    

show security nat destination rule all tenant

content_copy zoom_out_map
user@host> show security nat destination rule all tenant tn1

Total destination-nat rules: 1
Total referenced IPv4/IPv6 ip-prefixes: 2/0
Destination NAT rule: r1                     Rule-set: from_zone
  Rule-Id                    : 1
  Rule position              : 1
  From zone                  : untrust
  Match
    Source addresses         : 192.0.2.0       - 192.0.2.255
    Destination addresses    : 203.0.113.202   - 203.0.113.202
  Action                     : h1
  Translation hits           : 0
    Successful sessions      : 0
    Failed sessions          : 0
  Number of sessions         : 0

Release Information

Command introduced in Junos OS Release 9.2. The Description output field added in Junos OS Release 12.1.

Support for IPv6 logical systems and the Successful sessions, Failed sessions and Number of sessions output fields added in Junos OS Release 12.1X45-D10.

Output for multiple destination ports and the application option field added in Junos OS Release 12.1X47-D10.

The tenant option is introduced in Junos OS Release 18.3R1.

arrow_backward PREVIOUS show security nat destination pool

NEXT arrow_forward show security nat destination rule-application

Junos CLI Reference

ON THIS PAGE

show security nat destination rule

Syntax

Description

Options

Required Privilege Level

Output Fields

Sample Output

show security nat destination rule namelength-is-now-changed-upto-63-characterslength

Sample Output

show security nat destination rule all

show security nat destination rule all tenant

Release Information

Stay in touch

Helped me install or use the product
Accelerated my deployment

Discuss the product with a co-worker
Make a purchase inquiry

Junos CLI Reference

ON THIS PAGE

show security nat destination rule

Syntax

Description

Options

Required Privilege Level

Output Fields

Sample Output

show security nat destination rule namelength-is-now-changed-upto-63-characterslength

Sample Output

show security nat destination rule all

show security nat destination rule all tenant

Release Information

Related Documentation

Stay in touch