enable-reroute-uniform-link-check
Syntax
enable-reroute-uniform-link-check nat;
Hierarchy Level
[edit security flow]
Description
Enable retaining an existing session with Network Address Translation (NAT) rule when there is a change in egress interface because of rerouting.
The enable-reroute-uniform-link-check nat command
is disabled by default.
When the enable-reroute-uniform-link-check nat command is enabled:
If the new egress interface and the previous egress interface are in the same security zone and there is no change in the matched NAT rule or if no rule is applied before and after rerouting, the session is retained with the existing NAT rule.
If the new egress interface and the previous egress interface are in the same security zone and the matched NAT rule is changed, the session expires.
When the enable-reroute-uniform-link-check nat command is disabled:
If the new egress interface and the previous egress interface are in the same security zone, the traffic is forwarded to the new egress interface.
Required Privilege Level
services—To view this statement in the configuration.
services-control—To add this statement to the configuration.
Release Information
Statement introduced in Junos OS Release 18.3R1.