Support Support Downloads Knowledge Base Case Manager My Juniper Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[EOL/EOE] [NSM] Support of the Global Address Group in NAT rules on NSM

0

0

Article ID: KB27160 KB Last Updated: 18 Oct 2020Version: 2.0
Summary:
Note: A product listed in this article has either reached hardware End of Life (EOL) OR software End of Engineering (EOE).  Refer to End of Life Products & Milestones for the EOL, EOE, and End of Support (EOS) dates.
This article describes the issue of NSM being unable to push the configuration that contains Global Address Groups, which are used in a NAT rule, to SRX devices.
Symptoms:
When pushing the configuration from NSM to SRX, the following error message is generated:
Unable to create device DM.
Rule  1 present in the Source NAT Ruleset SNAT is having a Source Address null with domain name it can’t be pushed to the device No details Avalailable.
Solution:
This error message is generated when pushing configuration updates, which contain NAT rules with Global Address Groups, to the SRX device; even though NSM was able to successfully import the device configuration. This is due to Global Address Groups, as a source address or a destination address in a NAT rule, not being supported on NSM versions below 2012.1R3.

To resolve this issue, upgrade NSM to 2012.1R3 or later. As a workaround, you can use individual address objects, instead of an address group.
Modification History:
2020-10-18: Tagged article for EOL/EOE.
 
Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search