i have configured same configuration on my M7i router. but it’s showing error message.

please check the nat configuration

services {
nat {
pool campus-out {
address 192.168.0.53/32;
port automatic;
}
rule nat-out {
match-direction output;
term 1 {
then {
translated {
source-pool campus-out;
translation-type {
source dynamic;
}
}
}
}
}
rule nat-in {
match-direction input;
term all {
then {
no-translation;
}
}
}
}
service-set campus-service-set {
##
## invalid path element ‘ipsec-vpn-rule-sets’ …..(Error message)
##
nat-rules nat-out;
nat-rules nat-in;
interface-service {
service-interface sp-1/2/0.0;
}
}
}

i have configured same configuration on my M7i router. but it’s showing error message.

i want to configure outgoing nat rule.

Is it possible to do the same thing with a next-hop style configuration?

I’ve been unable to replicate this configuration using the service set applied to the “internal” interface. It seems like a routing loop is created.

Thanks!