This article provides a configuration example to assist during commit errors.

Configuring a DNS name in the global address book and then referencing it in the NAT rule does not commit successfully on the SRX.

root@abc# commit check

[edit security nat source rule-set Trust_to_Untrust rule rule1 match]

'source-address-name 123'

Address/address-set(123) isn't supported in NAT rule

error: configuration check-out failed

root@SRX# show security address-book 
global {
    address 123 {
        dns-name 123.com ipv4-only{                 <<<< The Ipv4-only knob is a must need in such scenarios
        }
    }

root@SRX# show security nat 
source {
    pool first {
        address {
            10.10.10.10/32;
        }
    }

    rule-set Trust_to_Untrust {
        from zone trust;
        to zone untrust;
        rule rule1 {
            match {
                source-address-name 123;
            }
            then {
                source-nat {
                    pool {
                        first;
                    }
                }
            }
        }
    }
}

root@SRX# commit check 
configuration check succeeds