pool (Security Destination NAT)
Syntax
pool pool-name { address <ip-address> { (port port-number | to ip-address); } description text; routing-instance (routing-instance-name | default); session-retain; }
Hierarchy Level
[edit security nat destination]
Description
Define a destination NAT pool to identify the pool uniquely.
Options
-
pool-name—Name of the pool.
-
description—Description of the pool.
-
session-retain —To support destination FQDN NAT session continue to use existing IP from DNS resolution up to session lifetime. By default, the
session-retain
is disabled.When enabled, the retained sessions remain in the session table, and cleared only upon connection termination from clients, or timeout due to sessions being inactive, or when sessions are explicitly cleared by the user through CLI.
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement modified in Junos OS Release 9.6. The description
option
added in Junos OS Release 12.1.
The session-retain
option added in Junos OS Release 23.1R1.