destination {
            pool test {
                address 192.168.100.10/32 port 22;
            }
            rule-set DNAT {
                from zone Internet;
                rule test {
                    match {
                        destination-address 0.0.0.0/0;
                        destination-port {
                            2222;
                        }
                        protocol tcp;
                    }
                    then {
                        destination-nat {
                            pool {
                                test;
                            }
                        }
                    }