[Edit Security Nat] Hierarchy Level - Juniper Junos OS Getting Started Manual

Getting Started Guide for Branch SRX Series
Related
Documentation

[edit security nat] Hierarchy Level

90
traffic-selector traffic-selector-name {
local-ip ip-address/netmask;
remote-ip ip-address/netmask;
}
vpn-monitor {
destination-ip ip-address;
optimized;
source-interface interface-name;
}
}
vpn-monitor-options {
interval seconds;
threshold number;
}
}
}
Security Configuration Statement Hierarchy on page 75
IPsec VPN Overview
Understanding Logical Systems for SRX Series Services Gateways
security {
nat {
destination {
pool pool-name {
address <ip-address> {
(port port-number | to ip-address);
}
description text;
routing-instance (routing-instance-name | default);
}
rule-set rule-set-name {
description text;
from {
interface [interface-name];
routing-instance [routing-instance-name];
zone [zone-name];
}
rule rule-name {
description text;
match {
application {
[application];
any;
}
(destination-address ip-address | destination-address-name address-name);
destination-port (port-or-low <to high>);
protocol [protocol-name-or-number];
source-address [ip-address];
source-address-name [address-name];
}
Copyright © 2016, Juniper Networks, Inc.