Article Detail

Description

This article provides information about the NAT rule limits on SRX devices.

Solution

The NAT rule limits for each SRX platform are listed below:

	SRC NAT Rules	DST NAT Rules	Static NAT Rules
SRX100H2/110H2/210H2/220H2/240H2	1024	1024	6144
SRX300/320	2048	2048	4096
SRX340	2048	2048	2048
SRX345	2048	2048	4096
SRX380	2048	2048	4096
SRX550/650	1024	1024	6144
SRX550 HM	2048	2048	6144
SRX1400	8192	8192	8192
SRX1500	8192	8192	8192
SRX3400/3600	20480	20480	20480
SRX4100/4200	20480	20480	20480
SRX4600	51200	51200	51200
SRX5600/5800	30720	30720	30720
vSRX-Small	1024	1024	1024
vSRX-Medium	4096	4096	6144
vSRX-Large	6144	6144	6144
vSRX-XL	8196	8196	8196

The current supported NAT values may also be verified by using the following CLI command:

show log nsd_chk_only | match NAT | match " = "

Example

On SRX345:

user> show log nsd_chk_only | match NAT | match " = "
    NAT rule Capacity Config :
        Source NAT rule number      = 2048
        Dest NAT rule number        = 2048
        Static NAT rule number      = 4096
        Interface NAT port ol factor      = 64
        Source NAT rule-set number      = 2048
        Dest NAT rule-set number        = 2048
        Static NAT rule-set number      = 4096

Modification History

2020-02-13: Updated tables based on current SRX products
2026-05-06: Added SRX380 NAT values.