This article describes about a commit error while we configure NAT rules.
Below error is observed when we commit a new NAT rule
root# commit check
[edit security nat source]
'rule-set LAN-WAN-2'
rule-set LAN-WAN-2 and rule-set LAN-WAN-1 have same context.
error: configuration check-out failed
Sample configuration:
set security nat source rule-set LAN-WAN-1 from zone JSC-Untrust
set security nat source rule-set LAN-WAN-1 to interface ge-0/0/0.0
set security nat source rule-set LAN-WAN-1 rule R2 match source-address 172.168.100.24/32
set security nat source rule-set LAN-WAN-1 rule R2 match destination-address 2.2.2.0/24
set security nat source rule-set LAN-WAN-1 rule R2 then source-nat pool pool2
set security nat source rule-set LAN-WAN-2 from zone JSC-Untrust
set security nat source rule-set LAN-WAN-2 to interface ge-0/0/0.0
set security nat source rule-set LAN-WAN-2 rule R2 match source-address 192.168.100.0/24
set security nat source rule-set LAN-WAN-2 rule R2 match destination-address 8.8.8.8/32
set security nat source rule-set LAN-WAN-2 rule R2 then source-nat pool pool3
Though it is completely a different network, the "From" and "To" statements are matching for both the rules LAN-WAN-1 and LAN-WAN-2.
Hence it is suggested to configure like below:
set security nat source rule-set LAN-WAN-1 from zone JSC-Untrust
set security nat source rule-set LAN-WAN-1 rule R1 match source-address 192.168.100.0/24
set security nat source rule-set LAN-WAN-1 rule R1 match destination-address 8.8.8.8/32
set security nat source rule-set LAN-WAN-1 rule R1 then source-nat pool pool3