{master}[edit]
root# show services 
service-set isp {
    nat-rules isp;
    ids-rules nat_max_flows;
    next-hop-service {
        inside-service-interface sp-5/1/0.10;
        outside-service-interface sp-5/1/0.20;
    }
}
ids {
    rule nat_max_flows {
        match-direction input;
        term first {
            from {
                applications traffic_udp;
            }
            then {
                session-limit {
                    by-source {
                        maximum 400;
                    }
                }
            }
        }
        term second {
            then {
                session-limit {
                    by-source {
                        maximum 600;
                    }
                }
            }
        }
    }
}
nat {
    pool isp_pool {
        address 19.66.159.0/26;
        port {
            automatic {
                random-allocation;
            }
            secured-port-block-allocation block-size 1024 max-blocks-per-address 4 active-block-timeout 300;
        }
        address-allocation round-robin;
    }
    rule isp {
        match-direction input;
        term nat-translation {
            from {                      
                source-address {
                    10.0.0.0/8;
                }
            }
            then {
                translated {
                    source-pool isp_pool;
                    translation-type {
                        napt-44;
                    }
                    address-pooling paired;
                }
            }
        }
    }
}

{master}[edit]
root show interfaces sp-5/1/0 
unit 10 {
    family inet;
    service-domain inside;
}
unit 20 {
    family inet;
    service-domain outside;
}

{master}[edit]
root# show firewall filter nat-test-input 
term goto-Nat {
    from {
        source-address {
            10.0.0.0/8;
        }
    }
    then {
        routing-instance Nat;
    }
}

{master}[edit]
root# show interfaces ae25.1515 
vlan-id 1515;
family inet {
    filter {
        input nat-test-input;
    }
    address 10.11.3.254/23;
}

{master}[edit]
root# show routing-instances Nat 
instance-type virtual-router;
interface sp-5/1/0.10;
routing-options {
    static {
        route 0.0.0.0/0 next-hop sp-5/1/0.10;
        route 10.0.0.0/8 next-table inet.0;
    }
}