rule-set (Security Destination NAT)
Syntax
rule-set rule-set-name {
description text;
from {
interface [interface-name];
routing-group [routing-group-name]];
routing-instance [routing-instance-name];
zone [zone-name];
}
rule rule-name {
description text;
match {
application {
[application];
any;
}
destination-address ip-address| destination-address-name address-name);
destination-port (port-or-low <to high>);
protocol [protocol-name-or-number];
source-address [ip-address];
source-address-name [address-name];
}
then {
destination-nat (off | pool pool-name | rule-session-count-alarm (clear-threshold value | raise-threshold value));
}
{
}
}
Hierarchy Level
[edit security nat destination]
Description
Configure a set of rules for destination NAT.
Options
| rule-set-name | Name of the rule set. |
| description | Description of the rule set. |
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement modified in Junos OS Release 9.6. The description option
added in Junos OS Release 12.1. Statement modified in Junos OS Release 12.1X45-D10.
Statement modified in Junos OS Release 12.1X47-D10.
The routing-group option is added in Junos OS Release 22.2R1.