Description

This article explains the cause and resolution of the error indicating that an address or address-set cannot be found in the default global address book during NAT configuration on Junos devices.

Symptoms

While committing configuration involving NAT rules, the following error is observed:

[edit security nat source rule-set <ruleset name> rule <rule name> match]
'destination-address-name <destination address name>'
 Can not find address/address-set(<destination address name>) in default global address book
error: configuration check-out failed

Solution

This error occurs when the NAT rule references an address or address-set that does not exist in the global address book. NAT rules by default expect address objects to be defined under the global address book hierarchy.
 
Verify whether the referenced address or address-set is defined in the global address book. If it is missing, create the required address or address-set under the global address book using the appropriate configuration hierarchy.
 
Once the object is defined globally, the NAT rule should commit successfully.
 

Modification History

2024-10-01 : Article Created