Creating Dynamic Outside Source Translation Rules; Defining Translation Timeouts - Juniper JUNOSE SOFTWARE FOR E SERIES 11.3.X - IP SERVICES CONFIGURATION GUIDE 2010-10-01 Configuration Manual

ip nat outside source list

Defining Translation Timeouts

Copyright © 2010, Juniper Networks, Inc.
Use to create dynamic translation rules that specify when to create a translation for
a source address when routing a packet from the inside network to the outside network.
Example
host (config) #ip nat inside source list translation1 pool pool1
Use the overload keyword to specify that the translation create extended entries
(protocol, port, and address) in the translation table for NAPT.
Use the no version to remove the dynamic translation rule; this command does not
remove any dynamic translations from the translation table.
See ip nat inside source list.

Creating Dynamic Outside Source Translation Rules

Use the ip nat outside source list command to create a dynamic outside source translation
rule. This command dynamically translates outside global source addresses to outside
local addresses when packets are routed from the outside network to the inside network
(and untranslates the destination address when a packet returns before a translation
table entry times out).
The no version of this command removes the dynamic translation rule, but does not
remove any previously created translations from the translation table. To remove active
translations from the translation table, see "Clearing Dynamic Translations" on page 76.
Use to create dynamic translation rules that specify when to create a translation for
a source address when routing a packet from the outside network to the inside network.
Example
host (config) # ip nat outside source list translation1 pool pool1
Use the no version to remove the dynamic translation rule; this command does not
remove any dynamic translations from the translation table.
See ip nat outside source list.
The router removes unused dynamic translations in the translation table. Use the ip nat
translation command to change or disable NAT translation timeouts.
You can set the aging time (in seconds) never) for any of the specified timers:
timeout—Dynamic simple translations (not for overloaded translations); default is
86400 seconds (24 hours).
dns-timeout—DNS-created protocol translations; default is 120 seconds. These dynamic
translations are installed by the DNS but not yet used; as soon as the translation is
used, the router applies the timeout value mentioned above.
udp-timeout—UDP protocol extended translations; default is 300 seconds (5 minutes).
Chapter 2: Configuring NAT
75