static (Security NAT)
Syntax
static {
rule-set rule-set-name {
description text;
from {
interface [interface-name];
routing-instance [routing-instance-name];
zone [zone-name];
}
rule rule-name {
description text;
match {
(destination-address <ip-address> | destination-address-name <address-name>);
destination-port (port-or-low | <to high>);
source-address [ip-address];
source-address-name [ip-address-name];
source-port (port-or-low <to high>);
}
then {
static-nat {
inet {
routing-instance (routing-instance-name| default);
}
nptv6-prefix {
address-prefix;
routing-instance routing-instance-name;
nptv6-prefix-name {
address-prefix-name;
routing-instance routing-instance-name;
[
prefix {
address-prefix;
mapped-port lower-port-range to upper-port-range;
routing-instance (routing-instance-name| default);
}
prefix {
address-prefix-name;
mapped-port lower-port-range to upper-port-range;
routing-instance (routing-instance-name| default);
}
rule-session-count-alarm (clear-threshold value | raise-threshold value);
}
}
}
}
}
Hierarchy Level
[edit security nat]
Description
Configure static NAT.
Options
The remaining statements are explained separately. See CLI Explorer.
Required Privilege Level
security—To view this statement in the configuration.
security-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release
9.3. The description option added in Junos OS Release 12.1.
Statement modified in Junos OS Release 12.1X45-D10. Statement modified
in Junos OS Release 12.3X48-D25.