rule (Security Static NAT)
Syntax
rule rule-name {
description text;
match {
(destination-address <ip-address> | destination-address-name <address-name>);
destination-port (port-or-low | <to high>);
source-address [ip-address];
source-address-name [ip-address-name];
source-port (port-or-low <to high>);
}
then {
static-nat {
inet {
routing-instance (routing-instance-name| default);
}
nptv6-prefix {
address-prefix;
routing-instance routing-instance-name;
nptv6-prefix-name {
address-prefix-name;
routing-instance routing-instance-name;
[
prefix {
address-prefix;
mapped-port lower-port-range to upper-port-range;
routing-instance (routing-instance-name| default);
}
prefix-name {
address-prefix-name;
mapped-port lower-port-range to upper-port-range;
routing-instance (routing-instance-name| default);
}
rule-session-count-alarm (clear-threshold value | raise-threshold value);
}
}
}
Hierarchy Level
[edit security nat static rule-set rule-set-name]
Description
Define a static NAT rule.
Options
rule-name—Name of the static NAT rule.Description—Description of the static NAT rule.
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release
9.3. The description option added in Junos OS Release 12.1.
Statement modified in Junos OS Release 12.1X45-D10. Statement modified
in Junos OS Release 12.3X48-D25.