I'm trying to follow the docs here and here. Both reference a `rule` directly below the Services/Nat context
[edit services nat]
rule rule-name {
[edit services nat]
user@host# set rule rule-dnat44 match-direction input term t1 from destination-address 20.20.20.20
However, when I try to apply a similar config on my srx240, I get a warning:
The configuration could not be un-locked.
Error(s):
1) syntax error
2) error recovery ignores input until this point
Warning(s):
1) rule
2) }
Here is the entire `services` section of my config:
services {
flow-monitoring {
version9 {
template IPv4Test {
ipv4-template;
}
}
}
application-identification;
nat {
rule testRule {
term testTerm {
from {
destination-address <WAN IP>/32;
}
then {
destination-prefix 192.168.1.22/32;
}
}
}
}
}
If I remove the rule it works fine.