set version 17.3R1.10
set system host-name SRX-NAT
set system root-authentication plain-text-password-value juniper123
set security nat source rule-set IPV4-OUT from zone IPV4
set security nat source rule-set IPV4-OUT to zone IPV6
set security nat source rule-set IPV4-OUT rule IPV4-IPV6-NAT match source-address 192.168.100.0/24
set security nat source rule-set IPV4-OUT rule IPV4-IPV6-NAT match destination-address 2001:db8::0/64
set security nat source rule-set IPV4-OUT rule IPV4-IPV6-NAT then source-nat interface
set security nat source rule-set IPV6-OUT from zone IPV6
set security nat source rule-set IPV6-OUT to zone IPV4
set security nat source rule-set IPV6-OUT rule IPV6-IPV4-NAT match source-address 2001:db8::/64
set security nat source rule-set IPV6-OUT rule IPV6-IPV4-NAT match destination-address 192.168.100.0/24
set security nat source rule-set IPV6-OUT rule IPV6-IPV4-NAT then source-nat interface
set security nat destination pool IPv4-HOST address 192.168.100.2/32
set security nat destination pool IPv6-HOST address 2001:db8::2/128
set security nat destination rule-set IPV4-to-IPV6 from zone IPV4
set security nat destination rule-set IPV4-to-IPV6 rule IPV4-NAT match destination-address 192.168.100.254/32
set security nat destination rule-set IPV4-to-IPV6 rule IPV4-NAT then destination-nat pool IPv6-HOST
set security nat destination rule-set IPV6-to-IPV4 from zone IPV6
set security nat destination rule-set IPV6-to-IPV4 rule IPV6-NAT match destination-address 2001:db8::254/128
set security nat destination rule-set IPV6-to-IPV4 rule IPV6-NAT then destination-nat pool IPv4-HOST
set security nat proxy-arp interface ge-0/0/0.0 address 192.168.100.254/32
set security nat proxy-ndp interface ge-0/0/1.0 address 2001:db8::254/128
set security policies global policy PERMIT-ALL match source-address any
set security policies global policy PERMIT-ALL match destination-address any
set security policies global policy PERMIT-ALL match application any
set security policies global policy PERMIT-ALL match from-zone IPV4
set security policies global policy PERMIT-ALL match from-zone IPV6
set security policies global policy PERMIT-ALL match to-zone IPV4
set security policies global policy PERMIT-ALL match to-zone IPV6
set security policies global policy PERMIT-ALL then permit
set security zones security-zone IPV4 interfaces ge-0/0/0.0 host-inbound-traffic system-services all
set security zones security-zone IPV4 interfaces ge-0/0/0.0 host-inbound-traffic protocols all
set security zones security-zone IPV6 interfaces ge-0/0/1.0 host-inbound-traffic system-services all
set security zones security-zone IPV6 interfaces ge-0/0/1.0 host-inbound-traffic protocols all
set interfaces ge-0/0/0 unit 0 family inet address 192.168.100.1/24
set interfaces ge-0/0/1 unit 0 family inet6 address 2001:db8::1/64