Juniper ACX2000

• Network Address Translation Rules Overview on page 1004
• Configuring Service Sets for Network Address Translation on page 1030
• Configuring Service Sets to Be Applied to Services Interfaces on page 1031
• Configuring Queuing and Scheduling on Inline Services Interface on page 1040
Network Address Translation Rules Overview
To configure a Network Address Translation (NAT) rule, include the rule rule-name
statement at the [edit services nat] hierarchy level:
[edit services nat]
allow-overlapping-nat-pools ;
apply-groups;
apply-groups-except;
pool pool-name;
port-forwarding port-forwarding-name;
rule (Services NAT) rule-name {
match-direction (Services NAT) input;
term (Services NAT) term-name {
from {
destination-address (Services NAT) prefix;
destination-address-range (ServicesNAT) low minimum-value high maximum-value
<except>;
destination-port range;
source-address prefix;
source-address-range (Services NAT) low minimum-value high maximum-value
<except>;
}
then (Services NAT) {
no-translation;
translated {
source-pool nat-pool-name;
source-prefix (Services NAT) source-prefix;
translation-type {
napt-44;
}
}
}
}
}
rule-set rule-set-name;
Each rule must include a match-direction statement that specifies the direction in which
the match is applied.
NOTE: ACX Series routers support only input as the match direction.
In addition, each NAT rule consists of a set of terms, similar to a firewall filter. A term
consists of the following:
Copyright © 2017, Juniper Networks, Inc.1004
ACX Series Universal Access Router Configuration Guide