set security nat destination pool A address 192.168.1.9/32
set security nat destination rule-set des-nat from zone untrust
set security nat destination rule-set des-nat rule WEb match destination-address x.x.x.x/32
set security nat destination rule-set des-nat rule WEb then destination-nat pool Ajuniper SRX防火墙基于目的NAT的配置
原文：http://blog.51cto.com/holger/2157321
