match (Security Destination NAT)
Syntax
match { application { [application]; any; } (destination-address ip-address | destination-address-name address-name); destination-port (port-or-low <to high>); protocol [protocol-name-or-number]; source-address [ip-address]; source-address-name [address-name]; }
Hierarchy Level
[edit security nat destination rule-set rule-set-name rule rule-name]
Description
Specify the destination rules to be used as match criteria.
If the options destination-port
and protocol
are configured as match conditions, then you cannot also configure
the application
option as a match condition. The reverse
is also true: if you configure the application
option as
a match condition for a rule, you cannot also configure the destination-port
and protocol options
.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement modified in Junos OS Release 9.6. Statement modified in Junos OS Release 12.1X47-D10.