Upon further experimentation I figured out that in GUI you have to populate the "NAT Target" field first. When that's done, "Target Port" field will appear, allowing you to configure an optional port value. In PCLI, you can't add port-target value unless and until you provisioned a nat-target value.