- play_arrow Junos OS Release Notes for ACX Series
- play_arrow Junos OS Release Notes for cRPD
- play_arrow Junos OS Release Notes for cSRX
- play_arrow Junos OS Release Notes for EX Series
- play_arrow Junos OS Release Notes for JRR Series
- play_arrow Junos OS Release Notes for NFX Series
- Junos OS Release Notes for PTX Series
- play_arrow Junos OS Release Notes for QFX Series
- play_arrow Junos OS Release Notes for SRX Series
- play_arrow What's New
- Authentication and Access Control
- Chassis Cluster-specific
- Flow-based and Packet-based Processing
- Intrusion Detection and Prevention
- J-Web
- Licensing
- Network Address Translation (NAT)
- Network Management and Monitoring
- Securing GTP and SCTP Traffic
- Software Installation and Upgrade
- Content Security
- VPNs
- What's Changed
- Known Limitations
- Open Issues
- Resolved Issues
- Migration, Upgrade, and Downgrade Instructions
- play_arrow Junos OS Release Notes for vMX
- play_arrow Junos OS Release Notes for vRR
- play_arrow Junos OS Release Notes for vSRX
- Licensing
- Finding More Information
- Requesting Technical Support
- Revision History
Network Address Translation (NAT)
Inline NAT support (MX204, MX240, MX480, MX960, MX2008, MX2010, MX2020, MX10003, MX10004, MX10008, and MX10016)—Starting in Junos OS Release 23.1R1, you need a license to use the inline NAT feature on the listed devices. The inline NAT feature is part of the Premium tier of licenses.
[See Flex Software License for MX Series Routers and MPC Service Cards.]
Source NAT port overload (MX240, MX480, and MX960 devices with MX-SPC3)—Starting in Junos OS Release 23.1R1, we support port overloading with and without enhanced port overloading hash algorithm. MX-SPC3 with port-overloading supports:
Maximum number of IP Address = 2048 per NPU.
Maximum port-overloading factor value = 32.
We’ve updated the hash algorithm to determine the port-overloading index for a destination address. The hash algorithm uses the reverse traffic from the server, matches the existing sessions, and reuses the same Network Address Translation (NAT) resources. To configure enhanced algorithm, it is mandatory to have port-loading.
You can configure the updated hash algorithm using the
enhanced-port-overloading-algorithm
statement at the [services nat source pool pool-name port
] hierarchy level. Enhanced port overloading algorithm provides better utilization of port overloading.CGNAT services on MX-SPC3 (MX240, MX480, and MX960 with MPC10)—Starting with Junos OS Release 23.1R1 CGNAT services support is added in MPC10 for access side subscribers.
AMS support for load balancing on MX-SPC3 (MX240, MX480, and MX960 with MPC10 )—Starting in Junos OS Release 23.1R1, we support load balancing using the new CLI option
modulo-key
in theset interfaces ams0 unit 1 load-balancing-options
command.