Network Address Translation Rules Overview - Juniper ACX1000 Configuration Manual

ACX Series Universal Access Router Configuration Guide

Network Address Translation Rules Overview

1004
Network Address Translation Rules Overview on page 1004
Configuring Service Sets for Network Address Translation on page 1030
Configuring Service Sets to Be Applied to Services Interfaces on page 1031
Configuring Queuing and Scheduling on Inline Services Interface on page 1040
To configure a Network Address Translation (NAT) rule, include the
statement at the [edit services nat]
[edit services nat]
allow-overlapping-nat-pools ;
apply-groups;
apply-groups-except;
pool pool-name;
port-forwarding port-forwarding-name;
rule (Services NAT) rule-name {
match-direction (Services NAT)
term (Services NAT) term-name {
from {
destination-address (Services NAT) prefix;
destination-address-range (Services NAT) low minimum-value high maximum-value
<except>;
destination-port range;
source-address prefix;
source-address-range (Services NAT) low minimum-value high maximum-value
<except>;
}
then (Services NAT) {
no-translation;
translated {
source-pool nat-pool-name;
source-prefix (Services NAT) source-prefix;
translation-type
napt-44;
}
}
}
}
}
rule-set rule-set-name;
Each rule must include a match-direction
the match is applied.
NOTE: ACX Series routers support only input as the match direction.
In addition, each NAT rule consists of a set of terms, similar to a firewall filter. A term
consists of the following:
hierarchy level:
input;
{
statement that specifies the direction in which
rule rule-name
Copyright © 2017, Juniper Networks, Inc.