Linux, FreeBSD, Juniper, Cisco / Network security articles and troubleshooting guides

static {
    rule-set NAT64-ruleset {
        from zone LAN;
        rule NAT64-rule {
            match {
                destination-address 64:ff9b::/96;
            }
            then {
                static-nat {           
                    inet;               
                }                       
            }                           
        }                               
    }                                   
}             
> show security nat static rule all
node0:
--------------------------------------------------------------------------
Total static-nat rules: 1
Total referenced IPv4/IPv6 ip-prefixes: 1/1

Static NAT rule: NAT64-test           Rule-set: NAT64
  Rule-Id                    : 1 
  Rule position              : 1
  From zone                  : LAN
  Destination addresses      : 64:ff9b::
  Host addresses             : 0.0.0.0
  Netmask                    : 96
  Host routing-instance      : N/A
  Translation hits           : 9
    Successful sessions      : 0
    Failed sessions          : 9
  Number of sessions         : 0

# set security nat static rule-set NAT64 rule NAT64-test match source-address ::/0
# show security nat static
static {
    rule-set NAT64-ruleset {
        from zone LAN;
        rule NAT64-rule {
            match {
                source-address ::/0;
                destination-address 64:ff9b::/96;
            }
            then {
                static-nat {           
                    inet;               
                }                       
            }                           
        }                               
    }                                   
}           
# run show security nat static rule all
node0:
--------------------------------------------------------------------------
Total static-nat rules: 1
Total referenced IPv4/IPv6 ip-prefixes: 1/1

Static NAT rule: NAT64-rule           Rule-set: NAT64-ruleset
  Rule-Id                    : 1 
  Rule position              : 1
  From zone                  : LAN
  Source addresses           : ::              - ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
  Destination addresses      : 64:ff9b::
  Host addresses             : 0.0.0.0
  Netmask                    : 96
  Host routing-instance      : N/A
  Translation hits           : 0
    Successful sessions      : 0
    Failed sessions          : 0
  Number of sessions         : 0

# set security nat static rule-set test rule 0 match ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> destination-address  Destination address
> destination-address-name  Address from address book
> destination-port     Destination port

# set security nat static rule-set test rule 0 match ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> destination-address  Destination address
> destination-address-name  Address from address book
> destination-port     Destination port
+ source-address       Source address
+ source-address-name  Address from address book
> source-port          Source port

# set security nat static rule-set test rule 0 match ?
Possible completions:
+ apply-groups         Groups from which to inherit configuration data
+ apply-groups-except  Don't inherit configuration data from these groups
> destination-address  Destination address
> destination-address-name  Address from address book
> destination-port     Destination port
+ source-address       Source address
+ source-address-name  Address from address book
> source-port          Source port