juniper SRX防火牆基於目的NAT的配置

set security nat destination pool A address 192.168.1.9/32
set security nat destination rule-set des-nat from zone untrust
set security nat destination rule-set des-nat rule WEb match destination-address x.x.x.x/32
set security nat destination rule-set des-nat rule WEb then destination-nat pool A