This article provides information on how to check the security/NAT name/element restriction on a SRX device.

How to check security/NAT name/element restriction on a SRX device.

To check the security/NAT name/element restriction on a current SRX device, enter the configuration mode and use either the show security nat | display detail or show security policies | display detail command. You can use | display detail for other commands; for example, policy-options .

root@SRX650-b# show security nat | display detail 
##
## nat: Configure Network Address Translation
## require: security 
## package: jkernel_usp 
##
##
## source: Configure Source NAT
## products: jsr2300, jsr4300, jsr6300, jsr4350, jsr6350, jsr2320, jsr2350, srx5800, srx5600, srx3600, srx3400--snipped--
## package: jkernel_usp 
##
source {
    ##
    ## Rule-set name
    ## range: 1 .. 31
    ## match: Must be a string beginning with a number or letter and consisting of letters, numbers, dashes and underscores.
    ## match (regex): ^[[:alnum:]][[:alnum:]_-]*$
    ## package: jkernel_usp 
    ##
    rule-set 1 {
        ##
        ## from: Where is the traffic from
        ## package: jkernel_usp 
        ##
        ##
        ## zone: Source zone list
        ## package: jkernel_usp 
        ## max-elements: 8
        ##
        from zone trust;
        ##
        ## to: Where is the traffic to
        ## package: jkernel_usp 
        ##
        ##
        ## zone: Destination zone list
        ## package: jkernel_usp 
        ## max-elements: 8
        ##
        to zone untrust;
        ##
        ## Source NAT Rule name
        ## range: 1 .. 31
        ## match: Must be a string beginning with a number or letter and consisting of letters, numbers, 
           dashes and underscores.
        ## match (regex): ^[[:alnum:]][[:alnum:]_-]*$
        ## package: jkernel_usp 
        ##
        rule 1 {
            ##
            ## match: Specify Source NAT rule match criteria
            ## package: jkernel_usp 
            ##
            match {
                ##
                ## source-address: Source address
                ## package: jkernel_usp 
                ## max-elements: 8      
                ##
                source-address 0.0.0.0/0;
                ##
                ## destination-address: Destination address
                ## package: jkernel_usp 
                ## max-elements: 8
                ##
                destination-address 0.0.0.0/0;
            }
            ##
            ## then: Then action
            ## package: jkernel_usp 
            ##
            then {
                ##
                ## source-nat: Source NAT action
                ## package: jkernel_usp 
                ##
                source-nat {
                    ##
                    ## interface: Use egress interface address
                    ## package: jkernel_usp 
                    ##
                    interface;
                }
            }
        }
    }
}