match (Security Source NAT)
Syntax
match { application { [application]; any; } (destination-address <ip-address> | destination-address-name <address-name>); destination-port (port-or-low <to high>); protocol [protocol-name | protocol-number]; source-address [ip-address]; source-address-name [address-name]; source-port (port-or-low <to high>); }
Hierarchy Level
[edit security nat source rule-set rule-set-name rule rule-name]
Description
Specify the source rules to be used as match criteria.
If the options source-port
, destination-port
, and protocol
are configured as match conditions, then
you cannot also configure the application
option as a match
condition. The reverse is also true: if you configure the application
option as a match condition for a rule, you cannot also configure
the source-port
, destination-port
, and protocol
options.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement modified in Junos OS Release 9.6. Statement modified in Junos OS Release 12.1X45-D10. Statement modified in Junos OS Release 12.1X47-D10.